Lucene search
PRIOn knowledge basePRION:CVE-2023-28679HistoryApr 02, 2023 - 9:15 p.m.
Cross site scripting
2023-04-0221:15:00
PRIOn knowledge base
www.prio-n.com
1
cross site scripting
jenkins mashup portlets plugin
stored xss
generic js portlet
authenticated attackers
overall/read permission
0.001 Low
EPSS
Percentile
32.4%
Jenkins Mashup Portlets Plugin 1.1.2 and earlier provides the “Generic JS Portlet” feature that lets a user populate a portlet using a custom JavaScript expression, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mashup_portlets | le | 1.1.2 |
Related
github
github
Jenkins Mashup Portlets Plugin vulnerable to stored cross-site scripting
2023-04-02 21:30:17
nvd
nvd
CVE-2023-28679
2023-04-02 21:15:09
cve
cve
CVE-2023-28679
2023-04-02 21:15:09
osv
osv
Jenkins Mashup Portlets Plugin vulnerable to stored cross-site scripting
2023-04-02 21:30:17
CVE-2023-28679
2023-04-02 21:15:09
cvelist
cvelist
CVE-2023-28679
2023-03-23 11:26:07
