PT-2013-2239 · Cloudbees+1 · Jenkins

CVE-2013-0328

·

Publicado

2013-03-19

·

Atualizado

2023-02-13

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 1.502 Jenkins LTS versions prior to 1.480.3
Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Recommendations For versions prior to 1.502, update to version 1.502 or later. For LTS versions prior to 1.480.3, update to version 1.480.3 or later.

Correção

XSS

CSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79CWE-352

Identificadores relacionados

CVE-2013-0328
GHSA-Q5F8-FXRX-PW6F
RHSA-2013:0638

Produtos afetados

Jenkins