Jenkins Lockable Resources Plugin XSS vulnerability
Moderate severity
GitHub Reviewed
Published
May 13, 2022
to the GitHub Advisory Database
•
Updated Jan 9, 2024
Description
Published by the National Vulnerability Database
Mar 28, 2019
Published to the GitHub Advisory Database
May 13, 2022
Last updated
Jan 9, 2024
Reviewed
Jan 9, 2024
A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin.
References