CVE-2013-6374

EUVD-2013-6199
Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.5 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 41%
Affected Products (NVD)
VendorProductVersion
jenkins-cibuild_failure_analyzer
𝑥
≤ 1.5.0
jenkins-cibuild_failure_analyzer
1.2.0
jenkins-cibuild_failure_analyzer
1.3.0
jenkins-cibuild_failure_analyzer
1.4.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
jenkins
lucid
dne
precise
not-affected
quantal
not-affected
raring
not-affected
saucy
not-affected
Common Weakness Enumeration
References
http://osvdb.org/100106
http://secunia.com/advisories/55783
https://wiki.jenkins-ci.org/display/JENKINS/Build+Failure+Analyzer
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20
http://osvdb.org/100106
http://secunia.com/advisories/55783
https://wiki.jenkins-ci.org/display/JENKINS/Build+Failure+Analyzer
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20