CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1000426

A cross-site scripting vulnerability exists in Jenkins Git Changelog Plugin 2.6 and earlier in GitChangelogSummaryDecorator/summary.jelly, GitChangelogLeftsideBuildDecorator/badge.jelly, GitLogJiraFilterPostPublisher/config.jelly, GitLogBasicChangelogPostPublisher/config.jelly that allows attackers able to control the Git history parsed by the plugin to have Jenkins render arbitrary HTML on some pages.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 28.6%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2018-1000426

Jenkins » Git Changelog » Version: N/A

cpe:2.3:a:jenkins:git_changelog:-
Jenkins » Git Changelog » Version: 1.0

cpe:2.3:a:jenkins:git_changelog:1.0
Jenkins » Git Changelog » Version: 1.1

cpe:2.3:a:jenkins:git_changelog:1.1
Jenkins » Git Changelog » Version: 1.10

cpe:2.3:a:jenkins:git_changelog:1.10
Jenkins » Git Changelog » Version: 1.11

cpe:2.3:a:jenkins:git_changelog:1.11
Jenkins » Git Changelog » Version: 1.12

cpe:2.3:a:jenkins:git_changelog:1.12
Jenkins » Git Changelog » Version: 1.13

cpe:2.3:a:jenkins:git_changelog:1.13
Jenkins » Git Changelog » Version: 1.14

cpe:2.3:a:jenkins:git_changelog:1.14
Jenkins » Git Changelog » Version: 1.15

cpe:2.3:a:jenkins:git_changelog:1.15
Jenkins » Git Changelog » Version: 1.16

cpe:2.3:a:jenkins:git_changelog:1.16
Jenkins » Git Changelog » Version: 1.17

cpe:2.3:a:jenkins:git_changelog:1.17
Jenkins » Git Changelog » Version: 1.18

cpe:2.3:a:jenkins:git_changelog:1.18
Jenkins » Git Changelog » Version: 1.19

cpe:2.3:a:jenkins:git_changelog:1.19
Jenkins » Git Changelog » Version: 1.2

cpe:2.3:a:jenkins:git_changelog:1.2
Jenkins » Git Changelog » Version: 1.21

cpe:2.3:a:jenkins:git_changelog:1.21
Jenkins » Git Changelog » Version: 1.22

cpe:2.3:a:jenkins:git_changelog:1.22
Jenkins » Git Changelog » Version: 1.23

cpe:2.3:a:jenkins:git_changelog:1.23
Jenkins » Git Changelog » Version: 1.24

cpe:2.3:a:jenkins:git_changelog:1.24
Jenkins » Git Changelog » Version: 1.25

cpe:2.3:a:jenkins:git_changelog:1.25
Jenkins » Git Changelog » Version: 1.26

cpe:2.3:a:jenkins:git_changelog:1.26
Jenkins » Git Changelog » Version: 1.27

cpe:2.3:a:jenkins:git_changelog:1.27
Jenkins » Git Changelog » Version: 1.28

cpe:2.3:a:jenkins:git_changelog:1.28
Jenkins » Git Changelog » Version: 1.29

cpe:2.3:a:jenkins:git_changelog:1.29
Jenkins » Git Changelog » Version: 1.3

cpe:2.3:a:jenkins:git_changelog:1.3
Jenkins » Git Changelog » Version: 1.31

cpe:2.3:a:jenkins:git_changelog:1.31
Jenkins » Git Changelog » Version: 1.32

cpe:2.3:a:jenkins:git_changelog:1.32
Jenkins » Git Changelog » Version: 1.33

cpe:2.3:a:jenkins:git_changelog:1.33
Jenkins » Git Changelog » Version: 1.34

cpe:2.3:a:jenkins:git_changelog:1.34
Jenkins » Git Changelog » Version: 1.35

cpe:2.3:a:jenkins:git_changelog:1.35
Jenkins » Git Changelog » Version: 1.36

cpe:2.3:a:jenkins:git_changelog:1.36
Jenkins » Git Changelog » Version: 1.37

cpe:2.3:a:jenkins:git_changelog:1.37
Jenkins » Git Changelog » Version: 1.38

cpe:2.3:a:jenkins:git_changelog:1.38
Jenkins » Git Changelog » Version: 1.39

cpe:2.3:a:jenkins:git_changelog:1.39
Jenkins » Git Changelog » Version: 1.4

cpe:2.3:a:jenkins:git_changelog:1.4
Jenkins » Git Changelog » Version: 1.41

cpe:2.3:a:jenkins:git_changelog:1.41
Jenkins » Git Changelog » Version: 1.42

cpe:2.3:a:jenkins:git_changelog:1.42
Jenkins » Git Changelog » Version: 1.43

cpe:2.3:a:jenkins:git_changelog:1.43
Jenkins » Git Changelog » Version: 1.44

cpe:2.3:a:jenkins:git_changelog:1.44
Jenkins » Git Changelog » Version: 1.45

cpe:2.3:a:jenkins:git_changelog:1.45
Jenkins » Git Changelog » Version: 1.46

cpe:2.3:a:jenkins:git_changelog:1.46
Jenkins » Git Changelog » Version: 1.47

cpe:2.3:a:jenkins:git_changelog:1.47
Jenkins » Git Changelog » Version: 1.48

cpe:2.3:a:jenkins:git_changelog:1.48
Jenkins » Git Changelog » Version: 1.49

cpe:2.3:a:jenkins:git_changelog:1.49
Jenkins » Git Changelog » Version: 1.5

cpe:2.3:a:jenkins:git_changelog:1.5
Jenkins » Git Changelog » Version: 1.50

cpe:2.3:a:jenkins:git_changelog:1.50
Jenkins » Git Changelog » Version: 1.51

cpe:2.3:a:jenkins:git_changelog:1.51
Jenkins » Git Changelog » Version: 1.52

cpe:2.3:a:jenkins:git_changelog:1.52
Jenkins » Git Changelog » Version: 1.53

cpe:2.3:a:jenkins:git_changelog:1.53
Jenkins » Git Changelog » Version: 1.54

cpe:2.3:a:jenkins:git_changelog:1.54
Jenkins » Git Changelog » Version: 1.55

cpe:2.3:a:jenkins:git_changelog:1.55
Jenkins » Git Changelog » Version: 1.56

cpe:2.3:a:jenkins:git_changelog:1.56
Jenkins » Git Changelog » Version: 1.57

cpe:2.3:a:jenkins:git_changelog:1.57
Jenkins » Git Changelog » Version: 1.6

cpe:2.3:a:jenkins:git_changelog:1.6
Jenkins » Git Changelog » Version: 1.7

cpe:2.3:a:jenkins:git_changelog:1.7
Jenkins » Git Changelog » Version: 1.8

cpe:2.3:a:jenkins:git_changelog:1.8
Jenkins » Git Changelog » Version: 1.9

cpe:2.3:a:jenkins:git_changelog:1.9
Jenkins » Git Changelog » Version: 2.0

cpe:2.3:a:jenkins:git_changelog:2.0
Jenkins » Git Changelog » Version: 2.1

cpe:2.3:a:jenkins:git_changelog:2.1
Jenkins » Git Changelog » Version: 2.2

cpe:2.3:a:jenkins:git_changelog:2.2
Jenkins » Git Changelog » Version: 2.3

cpe:2.3:a:jenkins:git_changelog:2.3
Jenkins » Git Changelog » Version: 2.4

cpe:2.3:a:jenkins:git_changelog:2.4
Jenkins » Git Changelog » Version: 2.5

cpe:2.3:a:jenkins:git_changelog:2.5
Jenkins » Git Changelog » Version: 2.6

cpe:2.3:a:jenkins:git_changelog:2.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1000426

Products

Pricing

Contact Us