CVE-2013-6374

Publication date 25 November 2013

Last updated 24 July 2024

Description

Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
jenkins	13.10 saucy	Not affected
	13.04 raring	Not affected
	12.10 quantal	Not affected
	12.04 LTS precise	Not affected
	10.04 LTS lucid	Not in release

How can I get the fixes?
What do statuses mean?

Notes

jdstrand

Build Failure Analyzer plugin not found in source

References

MITRE
NVD
Launchpad
Debian

Other references

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20
https://wiki.jenkins-ci.org/display/JENKINS/Build+Failure+Analyzer
http://secunia.com/advisories/55783
http://osvdb.org/100106
https://www.cve.org/CVERecord?id=CVE-2013-6374