What is GHSA-h52h-972r-68mh?

GHSA-h52h-972r-68mh is a security advisory published by GitHub Security Advisories with Low severity. Jenkins Build Failure Analyzer Plugin allows Cross-Site Scripting (XSS)

Which CVE IDs does GHSA-h52h-972r-68mh cover?

GHSA-h52h-972r-68mh covers the following CVE IDs: CVE-2013-6374. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-h52h-972r-68mh?

GHSA-h52h-972r-68mh affects 1 product, including: maven/com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer:\u003c 1.5.1.

GHSA-h52h-972r-68mhLow

Jenkins Build Failure Analyzer Plugin allows Cross-Site Scripting (XSS)

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

March 13, 2025

🔗 CVE IDs covered (1)

CVE-2013-6374 →

📋 Description

Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

🎯 Affected products1

maven/com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer:< 1.5.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2013-6374
https://wiki.jenkins-ci.org/display/JENKINS/Build+Failure+Analyzer
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20
https://github.com/jenkinsci/build-failure-analyzer-plugin/commit/cf20a8df11e71e8652180d9fafd9bb47385067c7
https://github.com/advisories/GHSA-h52h-972r-68mh