Lucene search
K

8 matches found

OSV
OSV
added 2024/03/06 6:30 p.m.21 views

GHSA-5J5R-6MV9-M255 Jenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4CVSS5.4AI score0.38903EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/03/06 6:30 p.m.31 views

Jenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4CVSS5.5AI score0.38903EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2024/03/06 5:15 p.m.12 views

CVE-2024-28156

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4CVSS5.5AI score0.38903EPSS
Exploits0References2
Prion
Prion
added 2024/03/06 5:15 p.m.31 views

Cross site scripting

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4AI score0.38903EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/06 5:1 p.m.17 views

CVE-2024-28156

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4AI score0.38903EPSS
Exploits0References2
CVE
CVE
added 2024/03/06 5:1 p.m.77 views

CVE-2024-28156

CVE-2024-28156 affects Jenkins Build Monitor View Plugin (versions ≤ 1.14-860.vd06ef2568b_3f). The root cause is that Build Monitor View names are not escaped, which enables stored cross-site scripting (XSS) when an attacker can configure Build Monitor Views. Multiple sources corroborate: Red Hat...

5.4CVSS5.3AI score0.38903EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/03/06 5:1 p.m.17 views

CVE-2024-28156

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4AI score0.38903EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/06 12:0 a.m.2 views

Jenkins Build Monitor View Plugin Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

5.4CVSS5.6AI score0.38903EPSS
Exploits0References2
Rows per page
Query Builder