CVE-2019-1003042

A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary…

published March 28, 2019

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01367 · 71.7th percentile
Published
2019-03-28T17:59Z
EPSS history
Timeline
  • 28 MAR 17:59Z
    A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary…
    cvelistv5