PoC_CVE-2024-28157

PoC CVE-2024-28157 Overview Jenkins GitBucket Plugin veersion 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs. Exploitation Steps Setup Jenkins using docker: 1. Use docker...

EUVD-2024-0831

Malicious code in bioql PyPI...

CVE-2024-28157

Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs...

Cross site scripting

Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs...

CVE-2024-28157

The Jenkins GitBucket Plugin (version 0.8 and earlier) is vulnerable to a stored cross-site scripting (XSS) attack. The root cause is a failure to sanitize Gitbucket URLs on build views. An attacker with the ability to configure jobs can set the Gitbucket URL to a javascript: URI (e.g., javascrip...

Jenkins GitBucket Plugin Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability ...