CVE-2018-1000177 | BDVDB-2026-100451 Detail

Description#

A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in src/main/resources/hudson/plugins/s3/S3ArtifactsProjectAction/jobMain.jelly that allows attackers able to control file names of uploaded files to define file names containing JavaScript that would be executed in another user's browser when that user performs some UI actions.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://jenkins.io/security/advisory/2018-04-16/

Exploit#

No public exploit known

History#

Version 12018-05-08Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.