Lucene search
HistoryMay 16, 2023 - 5:15 p.m.
CVE-2023-33002
cve-2023-33002
jenkins
testcomplete
xss
vulnerability
stored
cross-site scripting
exploitable
permission
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
29.7%
Jenkins TestComplete support Plugin 2.8.1 and earlier does not escape the TestComplete project name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected configurations
Node
jenkinstestcomplete_supportRange≤2.8.1jenkins
Related
prion
prion
Cross site scripting
2023-05-16 17:15:00
cvelist
cvelist
CVE-2023-33002
2023-05-16 16:00:18
veracode
veracode
Cross-site Scripting (XSS)
2023-05-30 08:31:06
cve
cve
CVE-2023-33002
2023-05-16 17:15:12
osv
osv
TestComplete support Plugin vulnerable to stored Cross-site Scripting
2023-05-16 18:30:16
CVE-2023-33002
2023-05-16 17:15:12
github
github
TestComplete support Plugin vulnerable to stored Cross-site Scripting
2023-05-16 18:30:16
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
29.7%
Related for NVD:CVE-2023-33002