CVE-2019-10349
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 3.9%
from disclosure to weapon1 days
Published on NVDJul 11
1st PoC+1d
exploitation probability
3.9%top 11% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
A stored cross site scripting vulnerability in Jenkins Dependency Graph Viewer Plugin 0.13 and earlier allowed attackers able to configure jobs in Jenkins to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins.
Affected products
Jenkins project · Jenkins Dependency Graph Viewer Pluginpublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/47111unverifiedcve_referencepacketstormsecurity.com/files/153610/Jenkins-Dependency-Graph-View-0.13-Cross-Site-Scripting.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.