Nixpkgs security tracker
8.0 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): Low (L)
- User Interaction (UI): Required (R)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
10 packages
- python314Packages.jenkins-job-builder
- python313Packages.jenkins-job-builder
- python312Packages.jenkins-job-builder
- python314Packages.python-jenkins
- python313Packages.python-jenkins
- python312Packages.python-jenkins
- python312Packages.jenkinsapi
- python313Packages.jenkinsapi
- python314Packages.jenkinsapi
- jenkins-job-builder
-
@LeSuisse
deleted
maintainer.delete
3 maintainers
- @coreyoconnor
- @earldouglas
- @NeQuissimus
- @LeSuisse accepted
- @LeSuisse published on GitHub
Jenkins 2.483 through 2.550 (both inclusive), LTS 2.492.1 through 2.541.1 …
Jenkins 2.483 through 2.550 (both inclusive), LTS 2.492.1 through 2.541.1 (both inclusive) does not escape the user-provided description of the "Mark temporarily offline" offline cause, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure or Agent/Disconnect permission.
References
-
Jenkins Security Advisory 2026-02-18 vendor-advisory
Affected products
- *
- <2.541.*
- <2.483
Matching in nixpkgs
Ignored packages (10)
pkgs.jenkins-job-builder
Jenkins Job Builder is a system for configuring Jenkins jobs using simple YAML files stored in Git
pkgs.python312Packages.jenkinsapi
None
pkgs.python313Packages.jenkinsapi
Python API for accessing resources on a Jenkins continuous-integration server
pkgs.python314Packages.jenkinsapi
Python API for accessing resources on a Jenkins continuous-integration server
pkgs.python312Packages.python-jenkins
None
pkgs.python313Packages.python-jenkins
Python bindings for the remote Jenkins API
pkgs.python314Packages.python-jenkins
Python bindings for the remote Jenkins API
pkgs.python312Packages.jenkins-job-builder
None
pkgs.python313Packages.jenkins-job-builder
Jenkins Job Builder is a system for configuring Jenkins jobs using simple YAML files stored in Git
pkgs.python314Packages.jenkins-job-builder
Jenkins Job Builder is a system for configuring Jenkins jobs using simple YAML files stored in Git
Package maintainers
-
@felixsinger Felix Singer <felixsinger@posteo.net>
Ignored maintainers (1)
-
@earldouglas James Earl Douglas <james@earldouglas.com>