REDHAT-BUG-1747293: Medium severity jenkins lts vulnerability
A stored cross-site scripting vulnerability in Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed attackers with Overall/Administer permission to configure the update site URL to inject arbitrary HTML and JavaScript in update center web pages.
Reference: http://www.openwall.com/lists/oss-security/2019/08/28/4
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1747293?
The severity of REDHAT-BUG-1747293 is medium with a rating of 4.
What is REDHAT-BUG-1747293?
REDHAT-BUG-1747293 is a stored cross-site scripting vulnerability in Jenkins that allows attackers with Overall/Administer permission to inject arbitrary HTML and JavaScript.
How do I fix REDHAT-BUG-1747293?
To fix REDHAT-BUG-1747293, upgrade Jenkins to version 2.192 or later and Jenkins LTS to version 2.176.3 or later.
Who is affected by REDHAT-BUG-1747293?
Users of Jenkins 2.191 and earlier, as well as Jenkins LTS 2.176.2 and earlier, are affected by REDHAT-BUG-1747293.
What impact does REDHAT-BUG-1747293 have on security?
REDHAT-BUG-1747293 can lead to unauthorized script execution in update center web pages, potentially compromising sensitive data.