Lucene search
GitHub Advisory DatabaseGHSA-XRRW-9J78-HPF3HistoryMar 06, 2024 - 6:30 p.m.
Jenkins HTML Publisher Plugin Stored XSS vulnerability
2024-03-0618:30:38
GitHub Advisory Database
github.com
11
jenkins
html publisher
xss
Jenkins HTML Publisher Plugin 1.32 and earlier does not escape job names, report names, and index page titles shown as part of the report frame, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected configurations
Node
org.jenkins-ci.pluginshtmlpublisherRange<1.32.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| org.jenkins-ci.plugins | htmlpublisher | * | cpe:2.3:a:org.jenkins-ci.plugins:htmlpublisher:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-28150
2024-03-06 17:15:10
prion
prion
Cross site scripting
2024-03-06 17:15:00
redhatcve
redhatcve
CVE-2024-28150
2024-03-06 18:46:50
osv
osv
Jenkins HTML Publisher Plugin Stored XSS vulnerability
2024-03-06 18:30:38
nvd
nvd
CVE-2024-28150
2024-03-06 17:15:10
cvelist
cvelist
CVE-2024-28150
2024-03-06 17:01:53
vulnrichment
vulnrichment
CVE-2024-28150
2024-03-06 17:01:53
veracode
veracode
Cross-site Scripting (XSS)
2024-03-11 05:22:10
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2024-03-06)
2024-03-07 00:00:00