CVE-2019-10336

A reflected cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.6 and earlier allowed attackers able to control the output of the…

published June 11, 2019

CVSS
—
EPSS
1%
Percentile
71.8
In the wild
Unconfirmed
What it is

A reflected cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.6 and earlier allowed attackers able to control the output of the ElectricFlow API to inject arbitrary HTML and JavaScript in job configuration forms containing post-build steps provided by this plugin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01375 · 71.8th percentile
Published
2019-06-11T13:15Z
EPSS history
Timeline
  • 11 JUN 13:15Z
    A reflected cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.6 and earlier allowed attackers able to control the output of the…
    cvelistv5