cve.bz

CVE-2017-1000404

6.1 mediumEPSS 0.9%

Medium (6.1) in jenkins delivery pipeline. EPSS 0.9% chance of exploitation in the next 30 days. Fixed in se.diabol.jenkins.pipeline:delivery-pipeline-plugin 1.0.8.

The Jenkins Delivery Pipeline Plugin version 1.0.7 and earlier used the unescaped content of the query parameter 'fullscreen' in its JavaScript, resulting in a cross-site scripting vulnerability through specially crafted URLs.

Severity

CVSS 3.0

6.1 medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE
CWE-79
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-g364-c7w5-93whMavense.diabol.jenkins.pipeline:delivery-pipeline-plugin<1.0.81.0.8

References

Check your stackJSON