Beveiligingsadvies

CVE-2023-25762

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-02-15 00:00:00

Laatst bijgewerkt 2025-03-19 18:48:35

Toegewezen door jenkins

CVSS-score 5.4

Status PUBLISHED

Beschrijving

Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.

← Alle CVE's bekijken Bekijk op cve.org ↗