Security Advisory

CVE-2024-52552

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-11-13 20:53:02

Last updated 2024-11-14 15:00:22

Assigner jenkins

State PUBLISHED

Description

Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

← Browse all CVEs View on cve.org ↗