Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:45837
HistoryMar 12, 2024 - 5:46 a.m.

Cross-Site Scripting

2024-03-1205:46:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
jenkins
vulnerability
build monitor plugin
cross-site scripting
improper sanitization
malicious scripts
security

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

org.jenkins-ci.plugins, build-monitor-plugin is vulnerable to Cross-site Scripting (XSS). The vulnerability is due improper sanitization of Build Monitor View names, which allows attackers with the ability to configure Build Monitor Views to inject malicious scripts into the view name.

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%