CVE-2018-1000108
13.03.2018, 13:29
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed.
| Vendor | Product | Version |
|---|---|---|
| jenkins | cppncss | 𝑥 ≤ 1.1 |
𝑥
= Vulnerable software versions