CVE-2012-4441

MEDIUM

Jenkins < 1.482 and LTS < 1.466.2 - Cross-Site Scripting in CI Game Plugin

Title source: llm
STIX 2.1

Description

Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin.

References (3)

Core 3
Core References
Mailing List, Third Party Advisory x_refsource_misc
http://www.openwall.com/lists/oss-security/2012/09/21/2
Third Party Advisory x_refsource_misc
https://security-tracker.debian.org/tracker/CVE-2012-4441

Scores

CVSS v3 6.1
EPSS 0.0176
EPSS Percentile 82.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (3)
jenkins/jenkins < 1.466.2
jenkins/jenkins < 1.482
org.jenkins-ci.plugins/ci-game 0 - 1.19Maven
Published Nov 18, 2019
Tracked Since Feb 18, 2026