Server side cross-site scripting In org.jenkins-ci.plugins:git
Description
Improper Neutralization of Input During Web Page Generation in Jenkins Git Plugin Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 4.2.1 |
Aliases
1. 2. 3. 4.
References
1. 2. 3.