CVE-2015-7536

3.5

LOWCVSS v2

Published

February 3, 2016

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts.

jenkinsci/jenkins

GitHubJenkins automation server

<= 1.625.1, <= 1.639NVD

jenkins

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

<= 1.625.1, <= 1.639NVD

jenkins

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

<= 1.625.1, <= 1.639NVD

jenkins

Docker HubDEPRECATED; use "jenkins/jenkins:lts" instead

<= 1.625.1, <= 1.639NVD

jenkins

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

<= 1.625.1, <= 1.639NVD

Security Advisories

CVE-2015-7536

Description

More on this CVE