Cross-site scripting vulnerability in URL setting in Jenkins - CVE-2019-10406 (dpkg)ID: oval:org.secpod.oval:def:58822 | Date: (C)2019-10-11 (M)2023-12-02 |
Class: VULNERABILITY | Family: unix |
The host is installed with Jenkins LTS through 2.176.3 or Jenkins rolling release through 2.196 and is prone to a cross-site scripting vulnerability. A flaw is present in the application, which fails to properly handle an issue in filtering the values specified by administrators as jenkins root URL. Successful exploitation could allow attackers to cause cross-site scripting.
Product: |
Jenkins LTS |
Jenkins rolling release |