CVE-2016-4988

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2016-4988

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-4988.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2016-4988

Aliases

GHSA-7w89-qqxx-c62r

Published

2017-02-09T15:59:01.097Z

Modified

2026-08-18T08:25:46.352422Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.

References

Affected packages

Git / github.com/jenkinsci/build-failure-analyzer-plugin

Affected ranges

Type

GIT

Repo

https://github.com/jenkinsci/build-failure-analyzer-plugin

Events

Introduced

Fixed

098283a535f392869330705d0adbb16efb616f82

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.16.0"
        }
    ],
    "cpe": "cpe:2.3:a:jenkins:build_failure_analyzer:*:*:*:*:*:jenkins:*:*",
    "source": "CPE_RANGE"
}

Affected versions

build-failure-analyzer-1.*

build-failure-analyzer-1.10.0

build-failure-analyzer-1.10.0-2

build-failure-analyzer-1.10.1

build-failure-analyzer-1.10.2

build-failure-analyzer-1.10.3

build-failure-analyzer-1.11.0

build-failure-analyzer-1.12.0

build-failure-analyzer-1.12.1

build-failure-analyzer-1.13.0

build-failure-analyzer-1.13.1

build-failure-analyzer-1.13.2

build-failure-analyzer-1.13.3

build-failure-analyzer-1.13.4

build-failure-analyzer-1.13.5

build-failure-analyzer-1.14.0

build-failure-analyzer-1.15.0

build-failure-analyzer-1.4.0

build-failure-analyzer-1.4.1

build-failure-analyzer-1.5.0

build-failure-analyzer-1.5.1

build-failure-analyzer-1.6.0

build-failure-analyzer-1.7.0

build-failure-analyzer-1.8.0

build-failure-analyzer-1.8.1

build-failure-analyzer-1.9.0

build-failure-analyzer-1.9.1

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-4988.json"