Jobconfighistory Plugin

Source repositories

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2018-1000416	Jenkins Project Jobconfighistory Plugin		0.00	—	0.00		Jan 9, 2019	A reflected cross-site scripting vulnerability exists in Jenkins Job Config History Plugin 2.18 and earlier in all Jelly files that shows arbitrary attacker-specified HTML in Jenkins to users with Job/Configure access.

CVE-2018-1000416Jan 9, 2019
Jenkins Project
Jobconfighistory Plugin
risk 0.00cvss —epss 0.00
A reflected cross-site scripting vulnerability exists in Jenkins Job Config History Plugin 2.18 and earlier in all Jelly files that shows arbitrary attacker-specified HTML in Jenkins to users with Job/Configure access.