Red Hat Security Advisory

RHSA-2023:1866

OpenShift Container Platform 4.10.58 security update

Released 2023-04-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.10 jenkins-2-plugins-4.10.1681719745-1.el8

Fixes 2 records

TI-2023-11034 CVE-2023-25762 · GHSA-9j65-3f2q-8q2r

Cross-site scripting in Jenkins Pipeline: Build Step Plugin

HIGH 65

Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.82131 Published 2023-02-15 Partial fix · 2.18.1 CWE-79

TI-2023-11033 CVE-2023-25761 · GHSA-ph74-8rgx-64c5

Cross-site scripting in Jenkins JUnit Plugin

LOW 26

Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to contro…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00699 Published 2023-02-15 Partial fix · 1119.1124.va_a_8ccde5658f, 1166.1168.vd6b_8042a_06de CWE-79