CVE-2018-1000108
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-1000108
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
CloudBees Jenkins CppNCSS Plugin 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CloudBees Jenkins是美国CloudBees公司的一套基于Java开发的持续集成工具，它主要用于监控持续的软件版本发布/测试项目和一些定时执行的任务。CppNCSS Plugin是使用其中的一个生成项目报告的插件。 CloudBees Jenkins CppNCSS Plugin 1.1及之前版本中的AbstractProjectAction/index.jelly文件存在跨站脚本漏洞。远程攻击者可通过构造连接到Jenkins URLs的链接利用该漏洞在用户浏览器中运行任意JavaScrip
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2018-1000108
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-1000108
请登录查看更多情报信息。
- https://jenkins.io/security/advisory/2018-02-26/#SECURITY-712x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2018-1000108
Same Patch Batch · n/a · 2018-03-13 · 54 CVEs total
| CVE-2018-1000087 | WolfCMS 跨站脚本漏洞 | |
| CVE-2018-1000126 | Ajenti 信息泄露漏洞 | |
| CVE-2018-7405 | Zoho ManageEngine EventLog Analyzer 跨站脚本漏洞 | |
| CVE-2018-1000124 | I Librarian I-librarian 安全漏洞 | |
| CVE-2018-1000123 | Ionic Team Cordova plugin iOS Keychain 信息泄露漏洞 | |
| CVE-2018-1227 | Pivotal Concourse 安全漏洞 | |
| CVE-2018-1000125 | inversoft prime-jwt 输入验证错误漏洞 | |
| CVE-2018-1000090 | textpattern 安全漏洞 | |
| CVE-2018-1000089 | Anymail django-anymail 安全漏洞 | |
| CVE-2018-1000088 | Doorkeeper 跨站脚本漏洞 | |
| CVE-2018-1000091 | KadNode 缓冲区错误漏洞 | |
| CVE-2018-1000086 | NPR Visuals Team Pym.js 跨站请求伪造漏洞 | |
| CVE-2018-1000085 | ClamAV XAR解析器安全漏洞 | |
| CVE-2018-1000084 | WolfCMS 跨站脚本漏洞 | |
| CVE-2018-1000083 | Ajenti 安全漏洞 | |
| CVE-2018-1000082 | Ajenti 跨站请求伪造漏洞 | |
| CVE-2018-1000081 | Ajenti 输入验证漏洞 | |
| CVE-2018-1000080 | Ajenti 安全漏洞 | |
| CVE-2018-1000079 | RubyGems 路径遍历漏洞 | |
| CVE-2018-1000078 | RubyGems 跨站脚本漏洞 |
Showing top 20 of 54 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2018-1000108
No comments yet