Skip to content
Sign in
5.4 Medium

CVE-2023-35143 Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape the versions of build artifacts on the Build…

Description

Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape the versions of build artifacts on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control maven project versions in `pom.xml`.

Affected products and versions

Product Affected versions Fixed in
Jenkins Maven Repository Server Plugin 1.0 earliest → 1.0 No fix stated

Other CVEs of Jenkins Maven Repository Server Plugin

The 2 CVEs of Jenkins Maven Repository Server Plugin →
CVE-2023-35144 Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape project and build display names on the Build… 5.4 Medium
Track this CVE