What is GHSA-cc55-c9j4-m7cx?

GHSA-cc55-c9j4-m7cx is a security advisory published by GitHub Security Advisories with Low severity. Jenkins allows Cross-Site Scripting (XSS)

Which CVE IDs does GHSA-cc55-c9j4-m7cx cover?

GHSA-cc55-c9j4-m7cx covers the following CVE IDs: CVE-2012-0325. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-cc55-c9j4-m7cx?

GHSA-cc55-c9j4-m7cx affects 2 products, including: maven/org.jenkins-ci.main:jenkins-core:\u003e= 1.425, \u003c 1.454; maven/org.jenkins-ci.main:jenkins-core:\u003c 1.424.5.

GHSA-cc55-c9j4-m7cxLow

Jenkins allows Cross-Site Scripting (XSS)

Vendor

GitHub Security Advisories

Published

May 4, 2022

Last Modified

March 13, 2025

🔗 CVE IDs covered (1)

CVE-2012-0325 →

📋 Description

Cross-site scripting (XSS) vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0324.

🎯 Affected products2

maven/org.jenkins-ci.main:jenkins-core:>= 1.425, < 1.454
maven/org.jenkins-ci.main:jenkins-core:< 1.424.5

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2012-0325
http://jvn.jp/en/jp/JVN79950061/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000023
http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-03-05.cb
https://web.archive.org/web/20200229025003/http://www.securityfocus.com/bid/52384
https://github.com/advisories/GHSA-cc55-c9j4-m7cx