CVE-2014-3681

4.3

MEDIUMCVSS v2

Published

October 15, 2014

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

jenkinsci/jenkins

GitHubJenkins automation server

< 1.565.3, < 1.583NVD

jenkins

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

< 1.565.3, < 1.583NVD

jenkins

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

< 1.565.3, < 1.583NVD

jenkins

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

< 1.565.3, < 1.583NVD

Security Advisories

CVE-2014-3681

Description

More on this CVE