Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2023/08/21 10:34 p.m.35 views

CVE-2023-4303 HTML injection vulnerability in Fortify Plugin

Jenkins Fortify Plugin 22.1.38 and earlier does not escape the error message for a form validation method, resulting in an HTML injection vulnerability...

4.3CVSS6.9AI score0.00471EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/08/21 10:34 p.m.16 views

CVE-2023-4303 HTML injection vulnerability in Fortify Plugin

Jenkins Fortify Plugin 22.1.38 and earlier does not escape the error message for a form validation method, resulting in an HTML injection vulnerability...

4.3CVSS6.8AI score0.00471EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/21 10:34 p.m.265 views

CVE-2023-4303

CVE-2023-4303 affects the Jenkins Fortify Plugin (versions 22.1.38 and earlier). The root issue is that the plugin does not escape the error message for a form validation method, which leads to an HTML injection vulnerability. Public sources confirm that Fortify Plugin 22.2.39 introduces a fix by...

6.1CVSS5.6AI score0.00471EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder