VULNERABILITY INTELLIGENCE

CVE-2017-1000102

CVSS score5.4 MEDIUM
EPSS probability0.74%
CISA KEVNot currently listed
Published2017-10-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for example the console output which is parsed to extract build warnings (Warnings Plugin), could insert arbitrary HTML into this view.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references