CVE-2017-1000404: Jenkins Delivery Pipeline

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

The Jenkins Delivery Pipeline Plugin version 1.0.7 and earlier used the unescaped content of the query parameter 'fullscreen' in its JavaScript, resulting in a cross-site scripting vulnerability through specially crafted URLs.

Affected products

• Jenkins Delivery Pipeline: up to and including 1.0.7

Published 2018-01-26. Last modified 2026-06-17.