Aller au contenu
Se connecter
5.4 Moyenne

CVE-2023-33002 Jenkins TestComplete support Plugin 2.8.1 and earlier does not escape the TestComplete project name, resulting in a…

Description

Jenkins TestComplete support Plugin 2.8.1 and earlier does not escape the TestComplete project name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins TestComplete support Plugin 2.8 premières → 2.8.1 Pas de correctif indiqué

Autres CVE de Jenkins TestComplete support Plugin

Les 3 CVE de Jenkins TestComplete support Plugin →
CVE-2023-24443 Jenkins TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity… 9.8 Critique CVE-2020-2209 Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the… Non notée
Suivre cette CVE