CVE-2019-1003042

—

CVSS 3.0

5.4 medium

EPSS

1%p70

Published

Mar 28, 2019 (Mar 28, 2019)

Modified

Jun 17, 2026

Description

A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin.

Vendors: jenkins
Products: lockable resources
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.