Lucene search
JenkinsVULNRICHMENT:CVE-2023-46650HistoryOct 25, 2023 - 1:45 p.m.
CVE-2023-46650
2023-10-2513:45:53
jenkins
github.com
jenkins
github
xss
vulnerability
permission
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
41.4%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Related
github
github
Stored XSS vulnerability in Jenkins GitHub Plugin
2023-10-25 18:32:25
prion
prion
Cross site scripting
2023-10-25 18:17:00
osv
osv
CVE-2023-46650
2023-10-25 18:17:39
Stored XSS vulnerability in Jenkins GitHub Plugin
2023-10-25 18:32:25
nvd
nvd
CVE-2023-46650
2023-10-25 18:17:39
cve
cve
CVE-2023-46650
2023-10-25 18:17:39
cvelist
cvelist
CVE-2023-46650
2023-10-25 13:45:53
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-10-25)
2023-10-25 00:00:00
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
41.4%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-46650