Security Advisory

CVE-2023-43499

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-09-20 16:06:11

Last updated 2024-09-24 18:51:28

Assigner jenkins

State PUBLISHED

Description

Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not escape Failure Cause names in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or update Failure Causes.

← Browse all CVEs View on cve.org ↗