2 matches found
CVE-2023-40346
Jenkins Shortcut Job Plugin 0.4 and earlier does not escape the shortcut redirection URL, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure shortcut jobs...
5.4CVSS0.0048EPSS
SaveExploits0References3
CVE-2023-40346: Improper Neutralization of Input During Web Page Generation
Jenkins Shortcut Job Plugin 0.4 and earlier does not escape the shortcut redirection URL, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure shortcut jobs...
5.4CVSS5.9AI score0.0048EPSS
SaveExploits0References2
20