VULNERABILITY INTELLIGENCE

CVE-2019-1003042

CVSS score5.4 MEDIUM
EPSS probability1.37%
CISA KEVNot currently listed
Published2019-03-28
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references