CVE-2012-0325
Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0324.
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cloudbees:jenkins
- jenkins:jenkins
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cc55-c9j4-m7cx | Maven | org.jenkins-ci.main:jenkins-core | >=1.425 <1.454 | 1.454 |
| GHSA-cc55-c9j4-m7cx | Maven | org.jenkins-ci.main:jenkins-core | <1.424.5 | 1.424.5 |