2023-03-23 11:26:00
jenkins
PUBLISHED
Jenkins Pipeline Aggregator View Plugin 1.13 and earlier does not escape a variable representing the current views URL in inline JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission.