Medium severity5.4NVD Advisory· Published Oct 5, 2017· Updated May 13, 2026

CVE-2017-1000103

Description

The custom Details view of the Static Analysis Utilities based DRY Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jvnet.hudson.plugins:dryMaven	< 2.49	2.49

Affected products

Jenkins/Dry
cpe:2.3:a:jenkins:dry:*:*:*:*:*:jenkins:*:*
Range: <=2.48

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/101061nvdThird Party AdvisoryVDB EntryWEB
github.com/advisories/GHSA-63cj-3r94-234vghsaADVISORY
jenkins.io/security/advisory/2017-08-07/nvdVendor Advisory
nvd.nist.gov/vuln/detail/CVE-2017-1000103ghsaADVISORY
jenkins.io/security/advisory/2017-08-07ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000