Количество 3
Количество 3
CVE-2023-25762
Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.
CVE-2023-25762
Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.
GHSA-9j65-3f2q-8q2r
Cross-site Scripting in Jenkins Pipeline: Build Step Plugin
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-25762 Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names. | CVSS3: 5.4 | 81% Высокий | больше 3 лет назад |
 | CVE-2023-25762 Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names. | CVSS3: 5.4 | 81% Высокий | больше 3 лет назад |
| GHSA-9j65-3f2q-8q2r Cross-site Scripting in Jenkins Pipeline: Build Step Plugin | CVSS3: 5.4 | 81% Высокий | больше 3 лет назад |
Уязвимостей на страницу