CVE-2017-1000109

Description

The custom Details view of the Static Analysis Utilities based OWASP Dependency-Check Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view.

References

https://github.com/advisories/GHSA-65cq-whr4-7c2v

https://jenkins.io/security/advisory/2017-08-07/

http://www.securityfocus.com/bid/100227

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS