Lucene search
+L

5 matches found

OSV
OSV
•added 2023/05/16 5:15 p.m.•15 views

CVE-2023-33007

Jenkins LoadComplete support Plugin 1.0 and earlier does not escape the LoadComplete test name, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS6AI score0.00456EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/05/16 4:00 p.m.•9 views

CVE-2023-33007

Jenkins LoadComplete support Plugin 1.0 and earlier does not escape the LoadComplete test name, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.7AI score0.00456EPSS
SaveExploits0References1
Mend
Mend
•added 2023/05/16 4:00 p.m.•0 views

CVE-2023-33007

Jenkins LoadComplete support Plugin 1.0 and earlier does not escape the LoadComplete test name, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS0.00456EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/05/16 12:00 a.m.•2 views

PT-2023-24137

Name of the Vulnerable Software and Affected Versions Jenkins LoadComplete support Plugin versions 1.0 and earlier Description The issue is related to a stored cross-site scripting XSS vulnerability. This occurs because the LoadComplete test name is not properly escaped, allowing attackers with...

5.4CVSS0.00456EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/16 12:00 a.m.•2 views

CVE-2023-33007: Improper Neutralization of Input During Web Page Generation

Jenkins LoadComplete support Plugin 1.0 and earlier does not escape the LoadComplete test name, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

5.4CVSS5.7AI score0.00456EPSS
SaveExploits0References3
Rows per page
Query Builder