A cross-site scripting vulnerability exists in Jenkins TestLink Plugin 2.12 and previous versions in TestLinkBuildAction/summary.jelly and others that allow an attacker who can control e.g. TestLink report names to have Jenkins serve arbitrary HTML and JavaScript
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
jenkins testlink |