CVE-2018-1000415
Description
A cross-site scripting vulnerability exists in Jenkins Rebuilder Plugin 1.28 and earlier in RebuildAction/BooleanParameterValue.jelly, RebuildAction/ExtendedChoiceParameterValue.jelly, RebuildAction/FileParameterValue.jelly, RebuildAction/LabelParameterValue.jelly, RebuildAction/ListSubversionTagsParameterValue.jelly, RebuildAction/MavenMetadataParameterValue.jelly, RebuildAction/NodeParameterValue.jelly, RebuildAction/PasswordParameterValue.jelly, RebuildAction/RandomStringParameterValue.jelly, RebuildAction/RunParameterValue.jelly, RebuildAction/StringParameterValue.jelly, RebuildAction/TextParameterValue.jelly, RebuildAction/ValidatingStringParameterValue.jelly that allows users with Job/Configuration permission to insert arbitrary HTML into rebuild forms.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
com.sonyericsson.hudson.plugins.rebuild:rebuildMaven | < 1.29 | 1.29 |
Affected products
3- Range: rebuild-1.10, rebuild-1.11, rebuild-1.12, …
Patches
Vulnerability mechanics
References
5- www.securityfocus.com/bid/106532nvdThird Party AdvisoryVDB EntryWEB
- github.com/advisories/GHSA-7m8v-w6f9-q2f9ghsaADVISORY
- jenkins.io/security/advisory/2018-09-25/nvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2018-1000415ghsaADVISORY
- github.com/jenkinsci/rebuild-plugin/commit/3a4ca33a45fa048c9ab7b7082f87e72c0df848cbghsaWEB
News mentions
0No linked articles in our index yet.