The vulnerability of the Jenkins website builder, update-center2, related to errors in handling HTTP headers, allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the Jenkins website builder, Jenkins update-center2, is related to errors in handling HTTP headers. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...

Jenkins 跨站脚本漏洞

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins update-center2 version 3.13 and 3.14. An attacker exploited the vulnerability ...

PT-2023-2263 · Jenkins · Jenkins Update-Center2 +1

Name of the Vulnerable Software and Affected Versions: Jenkins update-center2 versions 3.13 through 3.14 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This occurs because the required Jenkins core version on plugin download index pages is rendered without...