CVE-2019-10475
published 2019-10-23CVE-2019-10475: A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided…
medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EXPLOIT
A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jenkins | bitbucket_oauth_plugin | — | — |
| jenkins | build-metrics | <= 1.3 | — |
| jenkins | deploy_weblogic_plugin | — | — |
| jenkins | dynatrace_application_monitoring_plugin | — | — |
| jenkins | global_post_script_plugin | — | — |
| jenkins | ids_in_libvirt_agents_plugin | — | — |
| jenkins | ids_to_allow_users_configuring_the_plugin | — | — |
| jenkins | libvirt_agents_plugin | — | — |
| jenkins | mattermost_notification_plugin | — | — |
| jenkins | sonar_gerrit_plugin | — | — |
| jenkins | zulip_plugin | — | — |
| jenkins_project | jenkins_build-metrics_plugin | — | — |