{"id":"CVE-2017-1000103","details":"The custom Details view of the Static Analysis Utilities based DRY Plugin, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to this plugin could insert arbitrary HTML into this view.","aliases":["GHSA-63cj-3r94-234v"],"modified":"2026-07-08T11:34:55.774658Z","published":"2017-10-05T01:29:04.167Z","references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/101061"},{"type":"ADVISORY","url":"https://jenkins.io/security/advisory/2017-08-07/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jenkinsci/dry-plugin","events":[{"introduced":"0"},{"last_affected":"e5384bb2c98f09f3f69aff0a75970c1b514e4765"}],"database_specific":{"cpe":"cpe:2.3:a:jenkins:dry:*:*:*:*:*:jenkins:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"2.48"}],"source":"CPE_RANGE"}}],"versions":["dry-2.48","dry-2.47","dry-2.46","dry-2.45","dry-2.44","dry-2.43","dry-2.42","dry-2.41","dry-2.40","dry-2.39","dry-2.38","dry-2.37","dry-2.36","dry-2.35","dry-2.34","dry-2.33","dry-2.32","dry-2.31","dry-2.30","dry-2.29","dry-2.28","dry-2.27","dry-2.26","dry-2.25","dry-2.24","dry-2.23","dry-2.22","dry-2.21","dry-2.20","dry-2.19","dry-2.18","dry-2.16","dry-2.15","dry-2.14","dry-2.13"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000103.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"}]}