← Back to CVE List

CVE-2017-2601

Published: 2018-05-10T13:29Z
Last Modified: 2024-11-21T03:23Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in parameter names and descriptions (SECURITY-353). Users with the permission to configure jobs were able to inject JavaScript into parameter names and descriptions. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt