Lucene search
GitHub Advisory DatabaseGHSA-9J65-3F2Q-8Q2RHistoryFeb 15, 2023 - 3:30 p.m.
Cross-site Scripting in Jenkins Pipeline: Build Step Plugin
2023-02-1515:30:41
CWE-79
GitHub Advisory Database
github.com
17
0.001 Low
EPSS
Percentile
31.9%
Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.plugins:pipeline-build-step | le | 2.18 |
Related
osv
osv
Cross-site Scripting in Jenkins Pipeline: Build Step Plugin
2023-02-15 15:30:41
cvelist
cvelist
CVE-2023-25762
2023-02-15 00:00:00
cve
cve
CVE-2023-25762
2023-02-15 14:15:13
prion
prion
Cross site scripting
2023-02-15 14:15:00
redhatcve
redhatcve
CVE-2023-25762
2023-02-15 14:00:08
nessus
nessus
RHCOS 4 : OpenShift Container Platform 4.10.58 (RHSA-2023:1866)
2024-01-24 00:00:00
RHEL 8 : OpenShift Container Platform 4.10.58 (RHSA-2023:1866)
2024-04-28 00:00:00
RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3195)
2024-04-28 00:00:00
redhat
redhat
(RHSA-2023:3195) Important: jenkins and jenkins-2-plugins security update
2023-05-17 16:15:17