CVE-2019-10374

A stored cross-site scripting vulnerability in Jenkins PegDown Formatter Plugin 1.3 and earlier allows attackers able to edit descriptions and other fields…

published August 7, 2019

CVSS
—
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

A stored cross-site scripting vulnerability in Jenkins PegDown Formatter Plugin 1.3 and earlier allows attackers able to edit descriptions and other fields rendered using the configured markup formatter to insert links with the javascript scheme into the Jenkins UI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00720 · 53.4th percentile
Published
2019-08-07T14:20Z
EPSS history
Timeline
  • 07 AUG 14:20Z
    A stored cross-site scripting vulnerability in Jenkins PegDown Formatter Plugin 1.3 and earlier allows attackers able to edit descriptions and other fields…
    cvelistv5