Skip to content
OpenAdvisories
Low CVE-2013-6374 EUVD-2013-6199GHSA-h52h-972r-68mh

Jenkins Build Failure Analyzer Plugin allows Cross-Site Scripting (XSS)

Published Nov 25, 2013 · Updated Aug 6, 2024 · Assigned by redhat

Package: com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer Ecosystem: Maven

Description

Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer < 1.5.1 1.5.1 GHSA-h52h-972r-68mh

References