← CVE Intelligence

CVE-2023-32977

Jenkins Project / Jenkins Pipeline: Job Plugin PUBLISHED

Description (CNA)

Jenkins Pipeline: Job Plugin does not escape the display name of the build that caused an earlier build to be aborted, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set build display names immediately.

Affected (CNA)

Vendor / productVersions
Jenkins Project / Jenkins Pipeline: Job Pluginunaffected 1295.v395eb_7400005 before *; unaffected 1289.1291.vb_7c188e7e7df before 1289.*; unaffected 1207.1209.v69351208a_5a_7 before 1207.*

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.