CVEvulnerability
CVE-2019-10374
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-08-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
A stored cross-site scripting vulnerability in Jenkins PegDown Formatter Plugin 1.3 and earlier allows attackers able to edit descriptions and other fields rendered using the configured markup formatter to insert links with the javascript scheme into the Jenkins UI.
Affected configurations
• jenkins pegdown formatter (<= 1.3)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.openwall.com/lists/oss-security/2019/08/07/1 Mailing List, Third Party Advisory
- https://jenkins.io/security/advisory/2019-08-07/#SECURITY-142 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2019/08/07/1 Mailing List, Third Party Advisory
- https://jenkins.io/security/advisory/2019-08-07/#SECURITY-142 Vendor Advisory