[Cyber-Alerte] CVE-2019-16564 (pipeline_aggregator_view)

[admin]

Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to affects view content such as job display name or pipeline stage names.

Source :

You must be registered for see links

Posté automatiquement par le Bot FreelandForum.