Lucene search
+L

1 matches found

OSV
OSV
added 2023/07/26 3:30 p.m.3 views

GHSA-69VW-3PCM-84RW Jenkins Stored Cross-site Scripting vulnerability

Jenkins applies formatting to the console output of builds, transforming plain URLs into hyperlinks. Jenkins 2.415 and earlier, 2.414 and earlier, and LTS 2.401.2 and earlier does not sanitize or properly encode URLs of these hyperlinks in build logs. This results in a stored cross-site scripting...

8CVSS5.9AI score0.00996EPSS
SaveExploits0References6
Rows per page
Query Builder