CVE-2015-5326: XSS
First published: Mon Nov 16 2015(Updated: )
Cross-site scripting (XSS) vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/Jenkins | <1.638 | 1.638 |
| redhat/Jenkins | <1.625.2 | 1.625.2 |
| Jenkins Jenkins | <=1.637 | |
| Redhat Openshift | <=3.1 | |
| Redhat Openshift | =2.0 | |
| Jenkins Jenkins | <=1.625.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/author
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2015-5326
- agent/software-canonical-lookup
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- package-manager/redhat
- vendor/jenkins
- canonical/jenkins jenkins
- version/jenkins jenkins/1.637
- vendor/redhat
- canonical/redhat openshift
- version/redhat openshift/3.1
- version/redhat openshift/2.0
- version/jenkins jenkins/1.625.1