CVE-2019-1003014

2019-02-0616:29:00

CWE-79

[email protected]

web.nvd.nist.gov

jenkins

config file provider

xss

vulnerability

nvd

cve-2019-1003014

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.5%

JSON

CPENameOperatorVersion
jenkins:config_file_providerjenkins config file providerle3.4.1
redhat:openshift_container_platformredhat openshift container platformeq3.11

CPE	Name	Operator	Version
jenkins:config_file_provider	jenkins config file provider	le	3.4.1
redhat:openshift_container_platform	redhat openshift container platform	eq	3.11

References

access.redhat.com/errata/RHBA-2019:0326

access.redhat.com/errata/RHBA-2019:0327

jenkins.io/security/advisory/2019-01-28/#SECURITY-1253