Lucene search
Redhat.comRH:CVE-2023-25762HistoryFeb 15, 2023 - 2:00 p.m.
CVE-2023-25762
2023-02-1514:00:08
redhat.com
access.redhat.com
15
0.001 Low
EPSS
Percentile
31.9%
A flaw was found in the Jenkins pipeline-build-step plugin. Affected versions of the pipeline-build-step plugin do not escape job names in a JavaScript expression used in the Pipeline Snippet Generator. This can result in a stored cross-site scripting (XSS) vulnerability that may allow attackers to control job names.
Related
osv
osv
Cross-site Scripting in Jenkins Pipeline: Build Step Plugin
2023-02-15 15:30:41
github
github
Cross-site Scripting in Jenkins Pipeline: Build Step Plugin
2023-02-15 15:30:41
cvelist
cvelist
CVE-2023-25762
2023-02-15 00:00:00
cve
cve
CVE-2023-25762
2023-02-15 14:15:13
prion
prion
Cross site scripting
2023-02-15 14:15:00
nessus
nessus
RHCOS 4 : OpenShift Container Platform 4.10.58 (RHSA-2023:1866)
2024-01-24 00:00:00
RHEL 8 : OpenShift Container Platform 4.10.58 (RHSA-2023:1866)
2024-04-28 00:00:00
RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3195)
2024-04-28 00:00:00
redhat
redhat
(RHSA-2023:3195) Important: jenkins and jenkins-2-plugins security update
2023-05-17 16:15:17