Cross site scripting

2023-09-0613:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

jenkins

history plugin

stored xss

0.001 Low

EPSS

Percentile

38.6%

JSON

Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not property sanitize or escape the timestamp value from history entries when rendering a history entry on the history view, resulting in a stored cross-site scripting (XSS) vulnerability.

CPENameOperatorVersion
job_configuration_historyeq<= 1227.v7a-79fc4dc1f

CPE	Name	Operator	Version
	job_configuration_history	eq	<= 1227.v7a-79fc4dc1f

References

www.openwall.com/lists/oss-security/2023/09/06/9

www.jenkins.io/security/advisory/2023-09-06/

0.001 Low

EPSS

Percentile

38.6%

JSON

Related for PRION:CVE-2023-41931