CVE-2019-10395 | BDVDB-2026-122639 Detail

Jenkins projectJenkins Build Environment Plugin

Description#

Jenkins Build Environment Plugin 1.6 and earlier did not escape variables shown on its views, resulting in a cross-site scripting vulnerability in Jenkins 2.145, 2.138.1, or older, exploitable by users able to change various job/build properties.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openwall.com/lists/oss-security/2019/09/12/2
https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1476

Exploit#

No public exploit known

History#

Version 12019-09-12Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.