Server side cross-site scripting In org.jenkins-ci.plugins:script-security
Description
Improper Neutralization of Input During Web Page Generation in Jenkins Script Security Plugin Jenkins Script Security Plugin 1.72 and earlier does not correctly escape pending or approved classpath entries on the In-process Script Approval page, resulting in a stored cross-site scripting vulnerability.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 1.73 |
Aliases
1. 2. 3. 4.
References
1. 2. 3.