CVE-2011-4344: XSS
Cross-site scripting (XSS) vulnerability in Jenkins Core in Jenkins before 1.438, and 1.409 LTS before 1.409.3 LTS, when a stand-alone container is used, allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4344?
CVE-2011-4344 is classified as a medium severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2011-4344?
To fix CVE-2011-4344, upgrade Jenkins to version 1.438 or later, or 1.409.3 LTS or higher.
Which versions of Jenkins are affected by CVE-2011-4344?
CVE-2011-4344 affects Jenkins versions prior to 1.438 and 1.409 LTS versions before 1.409.3.
What type of vulnerability is CVE-2011-4344?
CVE-2011-4344 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary scripts.
What impact does CVE-2011-4344 have on users?
CVE-2011-4344 can allow attackers to execute malicious scripts in the context of a user's browser, potentially compromising user accounts and sensitive data.