Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-46650
HistoryOct 25, 2023 - 6:17 p.m.

Cross site scripting

2023-10-2518:17:00
PRIOn knowledge base
www.prio-n.com
3
cross site scripting
jenkins github plugin
github project url
stored xss vulnerability
item/configure permission

0.001 Low

EPSS

Percentile

38.8%

Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

CPENameOperatorVersion
githuble1.37.3

0.001 Low

EPSS

Percentile

38.8%

Related for PRION:CVE-2023-46650