PT-2017-10807

CVE-2017-1000102

·

Published

2017-10-04

·

Updated

2022-05-17

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Static Analysis Utilities based plugins (affected versions not specified)
Description The Details view of some Static Analysis Utilities based plugins was vulnerable to a persisted cross-site scripting issue. Malicious users who could influence the input to these plugins, such as the console output parsed to extract build warnings, could insert arbitrary HTML into this view.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-9C2P-99PG-C4J9
Found an issue in the description? Have something to add? Feel free to write us 👾