Beveiligingsadvies

CVE-2024-28150

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-03-06 17:01:53

Laatst bijgewerkt 2025-02-13 17:47:18

Toegewezen door jenkins

CVSS-score 4.7

Status PUBLISHED

Beschrijving

Jenkins HTML Publisher Plugin 1.32 and earlier does not escape job names, report names, and index page titles shown as part of the report frame, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

← Alle CVE's bekijken Bekijk op cve.org ↗