Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2019-10376

A reflected cross-site scripting vulnerability in Jenkins Wall Display Plugin 0.6.34 and earlier allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin.

VectorNETWORK

PublishedAug 07, 2019, 15:15

Published Byjenkinsci-cert@googlegroups.com

Base Score

Score6.1

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.jenkins-ci.plugins:jenkinswalldisplay(Maven)0N/AN/A

References

http://www.openwall.com/lists/oss-security/2019/08/07/1
https://jenkins.io/security/advisory/2019-08-07/#SECURITY-751

Weakness Type

CWE-79

CVSS Metrics

Base Score

6.1

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK