CVE-2024-28160

Jenkins iceScrum Plugin 1.1.6 and earlier does not sanitize iceScrum project URLs on build views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs...

CVE-2024-28160

creationtimestamp| type| source ---|---|--- 2024-03-06 18:27:00+00:00| seen| https://t.me/ctinow/201631...

CVE-2024-28160

Jenkins iceScrum Plugin 1.1.6 and earlier does not sanitize iceScrum project URLs on build views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs...

CVE-2024-28160

Jenkins iceScrum Plugin 1.1.6 and earlier does not sanitize iceScrum project URLs on build views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs...

CVE-2024-28160

The Jenkins iceScrum Plugin version 1.1.6 and earlier is vulnerable to a stored cross-site scripting (XSS) vulnerability. The root cause is the lack of sanitization for iceScrum project URLs displayed on build views. Attackers who possess the permissions to configure jobs can exploit this to inje...