VulnerabilityModified
CVE-2013-6374
Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
LOW 3.5EPSS 0.97%
Does this matter?
Lower severity and a low EPSS score (0.97%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
- EPSS
- 0.97% probability · 60th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- jenkins-ci/build failure analyzer
- Source
- secalert@redhat.com
References
- http://osvdb.org/100106
- http://secunia.com/advisories/55783Vendor Advisory
- https://wiki.jenkins-ci.org/display/JENKINS/Build+Failure+Analyzer
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20Vendor Advisory
- http://osvdb.org/100106
- http://secunia.com/advisories/55783Vendor Advisory
- https://wiki.jenkins-ci.org/display/JENKINS/Build+Failure+Analyzer
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.