Lucene search
PRIOn knowledge basePRION:CVE-2023-27905HistoryMar 10, 2023 - 9:15 p.m.
Cross site scripting
2023-03-1021:15:00
PRIOn knowledge base
www.prio-n.com
14
jenkins
update-center2
xss
vulnerability
exploit
plugin hosting
Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a plugin for hosting.
| CPE | Name | Operator | Version |
|---|---|---|---|
| update-center2 | eq | 3.14 | |
| update-center2 | eq | 3.13 |
Related
osv
osv
Cross site scripting vulnerability in update-center2
2023-03-10 21:30:19
CVE-2023-27905
2023-03-10 21:15:15
cvelist
cvelist
CVE-2023-27905
2023-03-08 17:14:53
cve
cve
CVE-2023-27905
2023-03-10 21:15:15
nvd
nvd
CVE-2023-27905
2023-03-10 21:15:15
github
github
Cross site scripting vulnerability in update-center2
2023-03-10 21:30:19
thn
thn
Critical Jenkins Vulnerability Exposes Servers to RCE Attacks - Patch ASAP!
2024-01-25 11:57:00
nessus
nessus
Jenkins LTS < 2.375.4 / Jenkins weekly < 2.394 Multiple Vulnerabilities
2023-03-09 00:00:00