CVSS 3.0
5.4 mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NCVE-2019-1003042
Medium (5.4) in jenkins lockable resources. EPSS 1.4% chance of exploitation in the next 30 days. Fixed in org.6wind.jenkins:lockable-resources 2.5.
A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:lockable_resources
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-wqjj-c9cx-q7cf | Maven | org.6wind.jenkins:lockable-resources | <2.5 | 2.5 |