Lucene search

K
osvGoogleOSV:CVE-2023-46650
HistoryOct 25, 2023 - 6:17 p.m.

CVE-2023-46650

2023-10-2518:17:39
Google
osv.dev
4
jenkins
github plugin
xss
vulnerability
cve-2023-46650
stored vulnerability
cross-site scripting
item/configure permission

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.8%

Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.8%

Related for OSV:CVE-2023-46650