CVE-2013-0328

Cross-site scripting (XSS) vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Date published : 2013-03-19

http://www.securityfocus.com/bid/57994

http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb