Cloudbees · Jenkins · CVE-2012-4440
**Name of the Vulnerable Software and Affected Versions**
Jenkins versions prior to 1.482
Jenkins LTS versions prior to 1.466.2
**Description**
The issue allows remote attackers to inject arbitrary web script or HTML via the Violations plugin, which can lead to Cross-site Scripting (XSS) attacks.
**Recommendations**
For Jenkins versions prior to 1.482, update to version 1.482 or later.
For Jenkins LTS versions prior to 1.466.2, update to version 1.466.2 or later.