CVE-2015-7536: XSS
Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to workspaces and archived artifacts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7536?
CVE-2015-7536 is rated as a medium severity vulnerability that allows for cross-site scripting (XSS) attacks.
How do I fix CVE-2015-7536?
To remediate CVE-2015-7536, upgrade Jenkins to version 1.625.2 or later, or to version 1.640 or later.
What types of users are affected by CVE-2015-7536?
CVE-2015-7536 affects remote authenticated users who can exploit the vulnerability via workspaces and archived artifacts.
In which versions of Jenkins is CVE-2015-7536 found?
CVE-2015-7536 is found in Jenkins versions prior to 1.640 and LTS versions prior to 1.625.2.
What kind of attack can be performed using CVE-2015-7536?
CVE-2015-7536 allows attackers to inject arbitrary web scripts or HTML into the Jenkins application.