Lucene search
GoogleOSV:BIT-JENKINS-2023-43495HistoryMar 06, 2024 - 10:54 a.m.
BIT-jenkins-2023-43495
2024-03-0610:54:50
Google
osv.dev
7
jenkins
lts
stored xss
0.001 Low
EPSS
Percentile
38.4%
Jenkins 2.423 and earlier, LTS 2.414.1 and earlier does not escape the value of the ‘caption’ constructor parameter of ‘ExpandableDetailsNote’, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control this parameter.
Related
cvelist
cvelist
CVE-2023-43495
2023-09-20 16:06:09
osv
osv
Jenkins Cross-site Scripting vulnerability
2023-09-20 18:30:21
CVE-2023-43495
2023-09-20 17:15:11
cve
cve
CVE-2023-43495
2023-09-20 17:15:11
alpinelinux
alpinelinux
CVE-2023-43495
2023-09-20 17:15:11
prion
prion
Cross site scripting
2023-09-20 17:15:00
redhatcve
redhatcve
CVE-2023-43495
2023-09-22 11:54:51
github
github
Jenkins Cross-site Scripting vulnerability
2023-09-20 18:30:21
veracode
veracode
Cross-site Scripting
2023-09-25 07:18:08
nessus
nessus
freebsd
freebsd
jenkins -- multiple vulnerabilities
2023-09-20 00:00:00
redos
redos
ROS-20240411-08
2024-04-11 00:00:00
ibm
ibm
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00