CVE-2012-6074 — Cross-site Scripting in Jenkins

CWE-79 — Cross-site Scripting7 documents7 sources
Severity
3.5LOWNVD
EPSS
0.2%
top 54.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cloudbees JenkinsJenkins
Timeline
PublishedFeb 24
Latest updateMay 14

Description

Cross-site scripting (XSS) vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote authenticated users with write access to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages2 packages

▶NVDjenkins/jenkins1.466.2+50
▶NVDcloudbees/jenkins1.480.3.1+16

🔴Vulnerability Details

3
GHSA
Jenkins allows Cross-Site Scripting (XSS)↗2022-05-14
▶
OSV
Jenkins allows Cross-Site Scripting (XSS)↗2022-05-14
▶
CVEList
CVE-2012-6074: Cross-site scripting (XSS) vulnerability in Jenkins before 1↗2013-02-24
▶

📋Vendor Advisories

2
Red Hat
Jenkins: cross-site scripting vulnerability↗2012-11-20
▶
Jenkins
Jenkins Security Advisory 2012-11-20↗2012-11-20
▶

💬Community

1
Bugzilla
CVE-2012-6074 Jenkins: cross-site scripting vulnerability↗2012-12-28
▶
CVE-2012-6074 — Cross-site Scripting in Jenkins | cvebase