CVE-2014-3678

EPSS 0.25%

Jenkins Monitoring Plugin allows Cross-Site Scripting (XSS)

Published: 5/17/2022Modified: 3/13/2025

Description

Cross-site scripting (XSS) vulnerability in the Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected packages (1)

Maven/org.jvnet.hudson.plugins:monitoringfrom 0, < 1.53.0

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 4.0	—	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

References (8)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2014-3678
PATCHhttps://github.com/jenkinsci/monitoring-plugin
WEBhttps://access.redhat.com/errata/RHBA-2014:1630
WEBhttps://access.redhat.com/security/cve/CVE-2014-3678
WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=1147760
WEBhttps://github.com/jenkinsci/monitoring-plugin/commit/f0f6aeef2032696c97d4b015dd51fa2b841b0473
WEBhttps://wiki.jenkins-ci.org/display/JENKINS/Monitoring
WEBhttps://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01