CVE-2023-35144

A flaw was found in the Jenkins Maven Repository Server Plugin, where it is vulnerable to Cross-site scripting caused by the improper validation of user-supplied input. A remote, authenticated attacker could exploit this vulnerability to inject malicious script into a web page, which would be executed in a victim’s web browser within the security context of the hosting web site once the page is viewed. This flaw allows an attacker to steal the victim’s cookie-based authentication credentials.