Cross-Site Scripting Vulnerability in Jenkins Shelve Project Plugin 1.5 and Earlier

CVE-2018-1999029 · LOW Severity

AV:N/AC:M/AU:S/C:N/I:P/A:N

A cross-site scripting vulnerability exists in Jenkins Shelve Project Plugin 1.5 and earlier in ShelveProjectAction/index.jelly, ShelvedProjectsAction/index.jelly that allows attackers with Job/Configure permission to define JavaScript that would be executed in another user's browser when that other user performs some UI actions.

Learn more about our User Device Pen Test.