What is GHSA-9c2p-99pg-c4j9?

GHSA-9c2p-99pg-c4j9 is a security advisory published by GitHub Security Advisories with Medium severity. Persistent XSS vulnerability in Static Analysis Utilities

Which CVE IDs does GHSA-9c2p-99pg-c4j9 cover?

GHSA-9c2p-99pg-c4j9 covers the following CVE IDs: CVE-2017-1000102. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9c2p-99pg-c4j9?

GHSA-9c2p-99pg-c4j9 has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-9c2p-99pg-c4j9?

GHSA-9c2p-99pg-c4j9 affects 1 product, including: maven/org.jvnet.hudson.plugins:analysis-core:\u003c= 1.91.

GHSA-9c2p-99pg-c4j9MediumCVSS 5.4

Persistent XSS vulnerability in Static Analysis Utilities

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

January 30, 2024

🔗 CVE IDs covered (1)

CVE-2017-1000102 →

📋 Description

The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for example the console output which is parsed to extract build warnings (Warnings Plugin), could insert arbitrary HTML into this view.

🎯 Affected products1

maven/org.jvnet.hudson.plugins:analysis-core:<= 1.91

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2017-1000102
https://jenkins.io/security/advisory/2017-08-07/
http://www.securityfocus.com/bid/101061
https://github.com/advisories/GHSA-9c2p-99pg-c4j9