Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 2

Количество 2

nvd логотип

CVE-2023-43499

около 3 лет назад

Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not escape Failure Cause names in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or update Failure Causes.

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-262f-77q5-rqv6

около 3 лет назад

Jenkins Build Failure Analyzer Plugin Cross-site Scripting vulnerability

CVSS3: 8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-43499

Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not escape Failure Cause names in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or update Failure Causes.

CVSS3: 5.4
1%
Низкий
около 3 лет назад
github логотип
GHSA-262f-77q5-rqv6

Jenkins Build Failure Analyzer Plugin Cross-site Scripting vulnerability

CVSS3: 8
1%
Низкий
около 3 лет назад

Уязвимостей на страницу