CVE-2019-1003042

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.37%

Published

Mar 28, 2019

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin.

Weaknesses (CWE)

CWE-79

Affected Products (1)

jenkins · lockable_resourcesvulnerable

References (8)

http://www.openwall.com/lists/oss-security/2019/03/28/2

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/107628

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2019:1423

https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1361

Vendor Advisory

http://www.openwall.com/lists/oss-security/2019/03/28/2

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/107628

KEV Catalog EPSS Scores Vendors All CVEs