Lucene search
JenkinsVULNRICHMENT:CVE-2024-28149HistoryMar 06, 2024 - 5:01 p.m.
CVE-2024-28149
2024-03-0617:01:53
jenkins
github.com
1
jenkins
html publisher plugin
xss攻撃
path existence check
Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclusive) does not properly sanitize input, allowing attackers with Item/Configure permission to implement cross-site scripting (XSS) attacks and to determine whether a path on the Jenkins controller file system exists.
Related
prion
prion
Cross site scripting
2024-03-06 17:15:00
osv
osv
Jenkins HTML Publisher Plugin does not properly sanitize input
2024-03-06 18:30:38
github
github
Jenkins HTML Publisher Plugin does not properly sanitize input
2024-03-06 18:30:38
cve
cve
CVE-2024-28149
2024-03-06 17:15:10
nvd
nvd
CVE-2024-28149
2024-03-06 17:15:10
cvelist
cvelist
CVE-2024-28149
2024-03-06 17:01:53
veracode
veracode
Cross Site Scripting(XSS)
2024-03-12 07:03:19
redhatcve
redhatcve
CVE-2024-28149
2024-03-06 18:46:40
nessus
nessus
RHEL 8 : Red Hat Product OCP Tools 4.13 OpenShift Jenkins (RHSA-2024:3636)
2024-06-05 00:00:00
RHEL 8 : Red Hat Product OCP Tools 4.12 Openshift Jenkins (RHSA-2024:3635)
2024-06-05 00:00:00
RHEL 8 : Red Hat Product OCP Tools 4.14 OpenShift Jenkins (RHSA-2024:3634)
2024-06-05 00:00:00
redhat
redhat
AI Score
5.5
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-28149