Security Advisory
CVE-2014-2065
4.3
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.
Published Date
October 17, 2014
Official Source
NIST NVD Advisory