CVE-2012-4440

Sažetak

Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin.

Reference

http://www.openwall.com/lists/oss-security/2012/09/21/2
https://security-tracker.debian.org/tracker/CVE-2012-4440
https://www.cloudbees.com/jenkins-security-advisory-2012-09-17

CVSS

Base:	4.3
Impact:	2.9
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
NONE	PARTIAL	NONE

CVSS vektor

AV:N/AC:M/Au:N/C:N/I:P/A:N

Zadnje važnije ažuriranje

19-11-2019 - 20:43

Objavljeno

18-11-2019 - 22:15