Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2024/11/13 12:00 a.m.•22 views

Stored XSS vulnerability in authorize-project

authorize-project 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. authorize-project 1.8.0 no longer evaluates a string...

8CVSS4.9AI score0.00687EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder