Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Maven Repository Server Plugin — Jenkins Security Advisory 2023-06-14 Clear all filters
TI-2023-17590 CVE-2023-35144 · GHSA-39r8-4962-j7vg

Cross-site scripting in Jenkins Maven Repository Server Plugin

Priority LOW 25

Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape project and build display names on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00617 Published 2023-06-14 No fix listed CWE-79
TI-2023-17589 CVE-2023-35143 · GHSA-9pvw-8q92-hm9w

Cross-site scripting in Jenkins Maven Repository Server Plugin

Priority LOW 25

Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape the versions of build artifacts on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability expl…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00617 Published 2023-06-14 No fix listed CWE-79