Количество 2
Количество 2
CVE-2023-43499
около 3 лет назад
Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not escape Failure Cause names in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or update Failure Causes.
CVSS3: 5.4
EPSS: Низкий
GHSA-262f-77q5-rqv6
около 3 лет назад
Jenkins Build Failure Analyzer Plugin Cross-site Scripting vulnerability
CVSS3: 8
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2023-43499 Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not escape Failure Cause names in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or update Failure Causes. | CVSS3: 5.4 | 1% Низкий | около 3 лет назад | |
GHSA-262f-77q5-rqv6 Jenkins Build Failure Analyzer Plugin Cross-site Scripting vulnerability | CVSS3: 8 | 1% Низкий | около 3 лет назад |
Уязвимостей на страницу
20