medium5.4
CVE-2019-16563
Cross site scripting in Jenkins Mission Control Plugin
Impact
Jenkins Mission Control Plugin 0.9.16 and earlier does not escape job display names and build names shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to change these properties.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | tech.andrey.jenkins:mission-control-view | <= 0.9.16 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Mission Control | through 0.9.16 |