Lucene search
GoogleOSV:GHSA-PQG3-XFX2-FMQPHistoryMar 10, 2023 - 9:30 p.m.
Cross site scripting vulnerability in update-center2
2023-03-1021:30:19
Google
osv.dev
4
0.002 Low
EPSS
Percentile
53.9%
Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a plugin for hosting.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci:update-center2 | eq | 3.14 | |
| org.jenkins-ci:update-center2 | eq | 3.13 |
Related
prion
prion
Cross site scripting
2023-03-10 21:15:00
cvelist
cvelist
CVE-2023-27905
2023-03-08 17:14:53
cve
cve
CVE-2023-27905
2023-03-10 21:15:15
github
github
Cross site scripting vulnerability in update-center2
2023-03-10 21:30:19
osv
osv
CVE-2023-27905
2023-03-10 21:15:15
thn
thn
Critical Jenkins Vulnerability Exposes Servers to RCE Attacks - Patch ASAP!
2024-01-25 11:57:00
nessus
nessus
Jenkins LTS < 2.375.4 / Jenkins weekly < 2.394 Multiple Vulnerabilities
2023-03-09 00:00:00