What is GHSA-5mwr-jg3r-jv66?

GHSA-5mwr-jg3r-jv66 is a security advisory published by GitHub Security Advisories with Low severity. Jenkins allows Cross-Site Scripting (XSS)

Which CVE IDs does GHSA-5mwr-jg3r-jv66 cover?

GHSA-5mwr-jg3r-jv66 covers the following CVE IDs: CVE-2015-5326. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-5mwr-jg3r-jv66?

GHSA-5mwr-jg3r-jv66 affects 2 products, including: maven/org.jenkins-ci.main:jenkins-core:\u003c 1.625.2; maven/org.jenkins-ci.main:jenkins-core:\u003e= 1.626, \u003c 1.638.

GHSA-5mwr-jg3r-jv66Low

Jenkins allows Cross-Site Scripting (XSS)

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

March 13, 2025

🔗 CVE IDs covered (1)

CVE-2015-5326 →

📋 Description

Cross-site scripting (XSS) vulnerability in the slave overview page in Jenkins before 1.638 and LTS before 1.625.2 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the slave offline status message.

🎯 Affected products2

maven/org.jenkins-ci.main:jenkins-core:< 1.625.2
maven/org.jenkins-ci.main:jenkins-core:>= 1.626, < 1.638

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2015-5326
https://access.redhat.com/errata/RHSA-2016:0070
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
http://rhn.redhat.com/errata/RHSA-2016-0489.html
https://github.com/jenkinsci/jenkins/commit/abe561499bbba2e725804c1117fc957028bbd608
https://github.com/advisories/GHSA-5mwr-jg3r-jv66