CVE-2019-10432

Jenkins HTML Publisher Plugin 1.20 and earlier did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting…

published October 1, 2019

CVSS
—
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

Jenkins HTML Publisher Plugin 1.20 and earlier did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01177 · 67.3th percentile
Published
2019-10-01T13:45Z
EPSS history
Timeline
  • 01 OCT 13:45Z
    Jenkins HTML Publisher Plugin 1.20 and earlier did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting…
    cvelistv5