Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:46145
HistoryApr 02, 2024 - 8:42 a.m.

Cross-Site Scripting (XSS)

2024-04-0208:42:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
jenkins
vulnerability
cross-site scripting
workspace
artifacts
remote authenticated users
web scripts
html

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.0%

Jenkins is vulnerable to Cross-site scripting (XSS). The vulnerability is due to improper handling of workspaces and archived artifacts, allowing remote authenticated users to inject arbitrary web scripts or HTML.

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.0%