{
  "entrypoint_kind": "open_document",
  "entrypoint_detail": "system log viewer (/log/agentlog/) rendering agent log records fetched over the remoting channel",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "jenkins 2.579 (vulnerable)",
    "jenkins 2.580 (fixed)",
    "jenkins remoting inbound agent (JNLP4)"
  ],
  "target_identity": {
    "repository_url": "https://github.com/jenkinsci/jenkins",
    "commit_sha": "9095ea3a5c5e7dcd392695a5dd880af1c9910ddf",
    "fixed_commit_sha": "497de4961ad80d97e26bfdeb0d2e40442a84ecb0",
    "target_digest": "7541cb37a97c3d07b0b1377906e674de8b3c3785102ce1523517855d1a972808",
    "runtime_digest": "sha256:a7342867ea33efaacf825229d50b7fc77c144ecada9719ab4e32419f5d7412be",
    "fixed_runtime_digest": "sha256:0e50a5b11ac14f3b84e529d725ed3a1c4b17ba16188dfa8d9a0189428b0839b1",
    "platform": "linux",
    "architecture": "x86_64"
  },
  "proof_artifacts": [
    "repro/proof/vulnerable_1/result.json",
    "repro/proof/vulnerable_2/result.json",
    "repro/proof/vulnerable_1/page.html",
    "repro/proof/vulnerable_2/page.html",
    "repro/proof/vulnerable_1/page.headers",
    "repro/proof/vulnerable_2/page.headers",
    "repro/proof/vulnerable_1/agent.log",
    "repro/proof/vulnerable_2/agent.log",
    "repro/proof/vulnerable_1/payload.txt",
    "repro/proof/vulnerable_2/payload.txt",
    "repro/proof/fixed_1/result.json",
    "repro/proof/fixed_2/result.json",
    "repro/proof/fixed_1/page.html",
    "repro/proof/fixed_2/page.html",
    "repro/proof/fixed_1/page.headers",
    "repro/proof/fixed_2/page.headers",
    "repro/proof/fixed_1/agent.log",
    "repro/proof/fixed_2/agent.log",
    "repro/proof/beacon.log",
    "repro/proof/vulnerable_1/beacon-hit.txt",
    "repro/proof/vulnerable_1/browser.log",
    "repro/proof/fixed_1/browser.log"
  ],
  "artifact_sha256": {
    "repro/proof/vulnerable_1/result.json": "97c09259148fb93547301052130baaceaa9a9eb0db79b1b7974cea55746017c6",
    "repro/proof/vulnerable_2/result.json": "7a922ec31fa93fc788594058712c1cb41b917843eee20aea88eb2fae07c78f29",
    "repro/proof/vulnerable_1/page.html": "5f97e48275c522a96f9a85dd9a7a9f75fd06e8c2da80a7697971cf247bdd6795",
    "repro/proof/vulnerable_2/page.html": "416f1e69b4cff801cdde6a5375f020a0b7b5ad9ffc02eb414310b72b0ee55a8b",
    "repro/proof/vulnerable_1/page.headers": "723926b72b3da423868bcd69dc8b83b6ccb43ffb529ac7ea4645e519cd03e284",
    "repro/proof/vulnerable_2/page.headers": "3ccff8a557b8ac7f395e566c2c9390efa3725aafee0af2d08adc9412a209dbe1",
    "repro/proof/vulnerable_1/agent.log": "a2b8a983b2288a5ee1227c353bd94b6b8947af3306fbb144c271e2ea4c5d1169",
    "repro/proof/vulnerable_2/agent.log": "1b145d42e73e3ef5e051333ae9ea3efd5be5aa08fd99e04e9b4700de9922e171",
    "repro/proof/vulnerable_1/payload.txt": "820f3b94b11914a3daa0702adbcbd00d341fcaff4dc8e962ba122bde7c7da9a9",
    "repro/proof/vulnerable_2/payload.txt": "5d198c4ff862d4460bb6fe66241d9a7a4d4f9a49f077dacc4456d3fd76f7dd06",
    "repro/proof/fixed_1/result.json": "cf3599548d6dee690616bd3d45b2400219bd0ef2417710d8ac8cdfbe12a5463f",
    "repro/proof/fixed_2/result.json": "a65dbdb761d22994c3c0c4ded7123ce6b344294d31bd233dfc0e05a3680aa9b0",
    "repro/proof/fixed_1/page.html": "1d461ce1a3dbdf54035c971610af67e4b8926481f34ec604e1340a50e05b1507",
    "repro/proof/fixed_2/page.html": "d323f68c7b80f750bad4e975995479842976741923291bf1f80ca0a2695c4696",
    "repro/proof/fixed_1/page.headers": "4b61a60a35786db06b55d5327dbb9d0370d85922036690bb4071b643cf9c29f0",
    "repro/proof/fixed_2/page.headers": "e67d05fbc3b5b527caa437fe0c0b787e5d2300a3ea72db3f861a0c16bbdb7753",
    "repro/proof/fixed_1/agent.log": "f42f2ebf6d54010732d596abe374cf427e4064abafd3a17c4a558719a76f88d9",
    "repro/proof/fixed_2/agent.log": "7eb3dab3a9081da97e323aa180b4d3d9b535a4f3bc244753246c6c1028f2f692",
    "repro/proof/beacon.log": "369a43ee27d0be83e305b28f8df0e348c37c8925c040c3ba129d928d28d8b9b7",
    "repro/proof/vulnerable_1/beacon-hit.txt": "a163ec9887d8c444e34fb802fbada4816597e4eec89c1ad990f2d7ef2fa27159",
    "repro/proof/vulnerable_1/browser.log": "1d1a9a8dd14665002287032393fdafcd496a2edf74f48c4163a5a8ed4f85f3cc",
    "repro/proof/fixed_1/browser.log": "832ac5289d35447e75dfaf9f8c85578f621ce180144cf255316dad55212841f3"
  },
  "notes": "stored XSS via unescaped LogRecord metadata (sourceClassName) on the system log recorder page; fixed build escapes metadata"
}