CVE-2017-1000109

Summary

The custom Details view of the Static Analysis Utilities based OWASP Dependency-Check Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/100227
• https://jenkins.io/security/advisory/2017-08-07/

References

• http://www.securityfocus.com/bid/100227
• https://jenkins.io/security/advisory/2017-08-07/

• ←Previous
• Next→