Security Advisory
CVE-2017-2601
5.4
MEDIUM
Vulnerability Description
Jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in parameter names and descriptions (SECURITY-353). Users with the permission to configure jobs were able to inject JavaScript into parameter names and descriptions.
Published Date
May 10, 2018
Official Source
NIST NVD Advisory