VYPR

Jobconfighistory Plugin

by Jenkins Project

Source repositories

CVEs (1)

  • CVE-2018-1000416MedJan 9, 2019
    risk 0.33cvss 6.1epss 0.01

    A reflected cross-site scripting vulnerability exists in Jenkins Job Config History Plugin 2.18 and earlier in all Jelly files that shows arbitrary attacker-specified HTML in Jenkins to users with Job/Configure access.