jenkins cppncss vulnerabilities

Latest jenkins cppncss CVEs

Newest publication first

1. CVE-2018-1000108 Reflected cross-site-scripting vulnerability in report URL of Jenkins CppNCSS Plugin

   Published 2018-03-13

   Medium·CVSS 6.1

   A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.