Aller au contenu
Se connecter
5.4 Moyenne

CVE-2023-35143 Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape the versions of build artifacts on the Build…

Description

Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape the versions of build artifacts on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control maven project versions in `pom.xml`.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Maven Repository Server Plugin 1.0 premières → 1.0 Pas de correctif indiqué

Autres CVE de Jenkins Maven Repository Server Plugin

Les 2 CVE de Jenkins Maven Repository Server Plugin →
CVE-2023-35144 Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape project and build display names on the Build… 5.4 Moyenne
Suivre cette CVE