CVE-2017-1000109

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-1000109
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000109.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-1000109
Aliases
Published
2017-10-05T01:29:04.367Z
Modified
2026-04-10T03:56:01.539405Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

The custom Details view of the Static Analysis Utilities based OWASP Dependency-Check Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view.

References

Affected packages

Git / github.com/jenkinsci/dependency-check-plugin

Affected ranges

Type
GIT
Repo
https://github.com/jenkinsci/dependency-check-plugin
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
49541b783e6e83674548d518950797aed629deac
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
81976250386ca6e42d4b2db03b20c6b0994953f4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3d0d7cbaf23cc159b730819f0858f2f25c947763
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
284ff3d37aedd37e6772202c4a7fff7cc9051f17
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
de25fdde2195cdaf935e9af61090e628d758fc33
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9358b6cd60b2b4ce8558910009f55de5c8aeb7ed
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e3ad5344c6842f0d500f2c6305ac8f90d1c9765d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
97f90836f43614828522af3233ca8bd890f4004f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5ab6e6057175bbbf3ad8922b9bb0ed3f7d4dc9c8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
20fe2af5eae5773c758fc3397bf6d37472641599
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
88a04c269060f5aabf41cbec94e22c53b258bbec
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a29257cd175c74c31825645e83eb82a1ab8e3d57
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
434c976f399185c7bae60b640b00afbe9df6a051
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ae34478c8a4c97569841f033e3899b2c133a8c89
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8d78f87b9f28f1a38101d4fea1a67195d4dec3f1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
266b5cef3ec50b8201e8677866f629aae938c1e7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
eea9c4e98b9f8861240dbd4283699003329abc4f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2550cd1321b0b44bb1f16faa98cf6a969a5a4774
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b3ce60f61f659110cb08a560af1ec7292ab9c435
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
127869f51e0b047764051ac687519d78cf4ca99d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
87b639f040eb3866c138244b272e02f26ab98483
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a40fef088239a5d8b6841d931ff3eae2911bdd53
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bfc488c2f6898bd326797f5ff8ee19c3537844c6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c0a6ec76544bc5128194d83643ca4cce4c8bc910
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
98dc54361b8883b660fe1f64ec1ca114ef31df9f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a16867efab3511c020b30376fa7e9d26f6a15b00
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
153edcf96b19fc37932946e79980630b4cb2dc58
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5a4ab3a3f60641c43337271983aede3dffc43159
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f3bd58ff18b32c5d78a2f8cd0794bf17514149e6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
daac2b6067912cb5c11a40c34edec87955725fd2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9ff4f455c579eacd96155cd006e2c1ea464a58bd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
93ebacea9934d9176f001d9c73501f4b9b1ceb0c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
68c5a3aa3e28d5cf3d4ed7cb7c4d29ba5acd88d0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
427bedd07c7289ed01b5a97fbbe70ed0e4dfb3f3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0953e83036d8fdb81f091686112a3d711f1d99df
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
49e9df14a518bf851f0ab1295e813c9e07a1abf0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
eca0276a88f2c3e35776e06096a2d909f6ac45b5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
69fd3d45345f1e89d707fae1323f559ad42e3213
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1e060e6d7e79e55a6ccc2d8d6e8590832923879b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
db46adb16aa762e1744f1e5db3fe6318a8a2c9b0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
de450f2fd9b5149035eddba6d4fe35616ea58f18
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
17aef1718bd19558a8e5101c17e92f84ad87e778
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1c10409e961d4c0701bacfd1d0ffbb7d45114f41
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
13c56556d146b169f754d699da13b41fbb70afed
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b446936e28df8d83addba29fc3f8ea71111b79cc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9ac837c030571d1306f8b89fb71cf8af90e7b390
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
693c21f78e394038f24aacd91bbbce1597adb82f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c464cc12a0f731d2dae560ef37c614db7c4416cc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
002ceef7614e98bde24fa1302b95086c08035a71
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7ab5f2d60b19560b9905afdbf2f5348068d30849
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
559f12cf41d1cc1170b8299090de772bfde7c0fc
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.3.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.7.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.11.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.1.1"
        }
    ]
}

Affected versions

dependency-check-jenkins-plugin-1.*
dependency-check-jenkins-plugin-1.0.1
dependency-check-jenkins-plugin-1.0.1.1
dependency-check-jenkins-plugin-1.0.2
dependency-check-jenkins-plugin-1.0.3
dependency-check-jenkins-plugin-1.0.4
dependency-check-jenkins-plugin-1.0.4.1
dependency-check-jenkins-plugin-1.0.5
dependency-check-jenkins-plugin-1.0.7
dependency-check-jenkins-plugin-1.0.8
dependency-check-jenkins-plugin-1.1.0
dependency-check-jenkins-plugin-1.1.1
dependency-check-jenkins-plugin-1.1.1.1
dependency-check-jenkins-plugin-1.1.1.2
dependency-check-jenkins-plugin-1.1.2
dependency-check-jenkins-plugin-1.1.3
dependency-check-jenkins-plugin-1.1.4
dependency-check-jenkins-plugin-1.1.4.1
dependency-check-jenkins-plugin-1.2.0
dependency-check-jenkins-plugin-1.2.1
dependency-check-jenkins-plugin-1.2.10
dependency-check-jenkins-plugin-1.2.11
dependency-check-jenkins-plugin-1.2.11.1
dependency-check-jenkins-plugin-1.2.2
dependency-check-jenkins-plugin-1.2.3
dependency-check-jenkins-plugin-1.2.3.1
dependency-check-jenkins-plugin-1.2.3.2
dependency-check-jenkins-plugin-1.2.4
dependency-check-jenkins-plugin-1.2.5
dependency-check-jenkins-plugin-1.2.6
dependency-check-jenkins-plugin-1.2.7
dependency-check-jenkins-plugin-1.2.7.1
dependency-check-jenkins-plugin-1.2.8
dependency-check-jenkins-plugin-1.2.9
dependency-check-jenkins-plugin-1.3.0
dependency-check-jenkins-plugin-1.3.1
dependency-check-jenkins-plugin-1.3.1.1
dependency-check-jenkins-plugin-1.3.1.2
dependency-check-jenkins-plugin-1.3.2
dependency-check-jenkins-plugin-1.3.3
dependency-check-jenkins-plugin-1.3.4
dependency-check-jenkins-plugin-1.3.5
dependency-check-jenkins-plugin-1.3.6
dependency-check-jenkins-plugin-1.4.0
dependency-check-jenkins-plugin-1.4.1
dependency-check-jenkins-plugin-1.4.2
dependency-check-jenkins-plugin-1.4.3
dependency-check-jenkins-plugin-1.4.4
dependency-check-jenkins-plugin-1.4.5
dependency-check-jenkins-plugin-2.*
dependency-check-jenkins-plugin-2.0.0
dependency-check-jenkins-plugin-2.0.1
dependency-check-jenkins-plugin-2.0.1.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000109.json"