CVE-2018-1000413

A cross-site scripting vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in configfiles.jelly, providerlist.jelly that allows users…

published January 9, 2019

CVSS
—
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

A cross-site scripting vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in configfiles.jelly, providerlist.jelly that allows users with the ability to configure configuration files to insert arbitrary HTML into some pages in Jenkins.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00947 · 60.8th percentile
Published
2019-01-09T23:00Z
EPSS history
Timeline
  • 09 JAN 23:00Z
    A cross-site scripting vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in configfiles.jelly, providerlist.jelly that allows users…
    cvelistv5