Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9pvw-8q92-hm9w

Опубликовано: 14 июн. 2023
Источник: github
Github: Прошло ревью
CVSS3: 5.4

Описание

Stored XSS vulnerability in Jenkins Maven Repository Server Plugin

Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape the versions of build artifacts on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control maven project versions in pom.xml.

Пакеты

Наименование

jenkins:repository

maven
Затронутые версииВерсия исправления

<= 1.10

Отсутствует

EPSS

Процентиль: 88%
0.03906
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 8
redhat
больше 2 лет назад

Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape the versions of build artifacts on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control maven project versions in `pom.xml`.

CVSS3: 5.4
nvd
больше 2 лет назад

Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape the versions of build artifacts on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control maven project versions in `pom.xml`.

EPSS

Процентиль: 88%
0.03906
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79