Lucene search
+L

9 matches found

OSV
OSV
•added 2024/03/06 6:30 p.m.•87 views

GHSA-5J5R-6MV9-M255 Jenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4CVSS5.4AI score0.80173EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/03/06 6:30 p.m.•48 views

Jenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4CVSS5.5AI score0.80173EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2024/03/06 5:15 p.m.•38 views

CVE-2024-28156

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4CVSS5.5AI score0.80173EPSS
SaveExploits0References2
Prion
Prion
•added 2024/03/06 5:15 p.m.•46 views

Cross site scripting

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4AI score0.80173EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/06 5:01 p.m.•102 views

CVE-2024-28156

CVE-2024-28156 affects Jenkins Build Monitor View Plugin (versions ≤ 1.14-860.vd06ef2568b_3f). The root cause is that Build Monitor View names are not escaped, which enables stored cross-site scripting (XSS) when an attacker can configure Build Monitor Views. Multiple sources corroborate: Red Hat...

5.4CVSS5.3AI score0.80173EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/03/06 5:01 p.m.•54 views

CVE-2024-28156

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4AI score0.80173EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/03/06 5:01 p.m.•20 views

CVE-2024-28156

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4AI score0.80173EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/06 12:00 a.m.•2 views

CVE-2024-28156: Improper Neutralization of Input During Web Page Generation

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4CVSS5.7AI score0.80173EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/03/06 12:00 a.m.•14 views

Jenkins Build Monitor View Plugin Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

5.4CVSS5.6AI score0.80173EPSS
SaveExploits0References2
Rows per page
Query Builder