Lucene search
GoogleOSV:GHSA-3VCR-579J-4X48HistorySep 06, 2023 - 3:30 p.m.
Stored XSS vulnerability in Jenkins TAP Plugin
2023-09-0615:30:26
Google
osv.dev
4
jenkins
tap plugin
stored xss
vulnerability
cross-site scripting
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
38.8%
Jenkins TAP Plugin 2.3 and earlier does not escape TAP file contents, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control TAP file contents.
Related
cve
cve
CVE-2023-41940
2023-09-06 13:15:11
cvelist
cvelist
CVE-2023-41940
2023-09-06 12:08:59
github
github
Stored XSS vulnerability in Jenkins TAP Plugin
2023-09-06 15:30:26
prion
prion
Cross site scripting
2023-09-06 13:15:00
osv
osv
CVE-2023-41940
2023-09-06 13:15:11
nvd
nvd
CVE-2023-41940
2023-09-06 13:15:11
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-09-06)
2023-09-07 00:00:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
38.8%
Related for OSV:GHSA-3VCR-579J-4X48