Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2012-4440

Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin.

VectorNETWORK

PublishedNov 18, 2019, 22:15

Published Bysecalert@redhat.com

Base Score

Score6.1

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.jenkins-ci.plugins:violations(Maven)00.7.11N/A

References

http://www.openwall.com/lists/oss-security/2012/09/21/2
https://security-tracker.debian.org/tracker/CVE-2012-4440
https://www.cloudbees.com/jenkins-security-advisory-2012-09-17

Weakness Type

CWE-79

CVSS Metrics

Base Score

6.1

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK