Lucene search
GitHub Advisory DatabaseGHSA-5J74-G3C5-WQWWHistoryMar 06, 2024 - 6:30 p.m.
Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting
2024-03-0618:30:38
CWE-79
GitHub Advisory Database
github.com
7
jenkins
gitbucket
xss
vulnerability
attackers
configuration
jobs
Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs.
Affected configurations
Node
org.jenkinsci.plugins\Matchgitbucket
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.plugins:gitbucket | le | 0.8 |
Related
cve
cve
CVE-2024-28157
2024-03-06 17:15:10
osv
osv
Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting
2024-03-06 18:30:38
prion
prion
Cross site scripting
2024-03-06 17:15:00
nvd
nvd
CVE-2024-28157
2024-03-06 17:15:10
cvelist
cvelist
CVE-2024-28157
2024-03-06 17:01:59
veracode
veracode
Cross Site Scripting
2024-03-07 07:31:13
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2024-03-06)
2024-03-07 00:00:00