Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-32977
HistoryMay 16, 2023 - 4:15 p.m.

Cross site scripting

2023-05-1616:15:00
PRIOn knowledge base
www.prio-n.com
9
jenkins
pipeline
job plugin
build names
cross-site scripting
vulnerability
attackers

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.5%

Jenkins Pipeline: Job Plugin does not escape the display name of the build that caused an earlier build to be aborted, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set build display names immediately.

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.5%