CVE-2015-1812

4.3

MEDIUMCVSS v2

Published

October 16, 2015

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1813.

jenkinsci/jenkins

GitHubJenkins automation server

<= 1.596.1, <= 1.605NVD

jenkins

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

<= 1.596.1, <= 1.605NVD

jenkins

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

<= 1.596.1, <= 1.605NVD

jenkins

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

<= 1.596.1, <= 1.605NVD

Security Advisories

CVE-2015-1812

Description

More on this CVE