CVE-2019-10374

Description

A stored cross-site scripting vulnerability in Jenkins PegDown Formatter Plugin 1.3 and earlier allows attackers able to edit descriptions and other fields rendered using the configured markup formatter to insert links with the javascript scheme into the Jenkins UI.

References

https://jenkins.io/security/advisory/2019-08-07/#SECURITY-142

http://www.openwall.com/lists/oss-security/2019/08/07/1

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS