CVE-2023-40346

Jenkins Shortcut Job Plugin 0.4 and earlier does not escape the shortcut redirection URL, resulting in a stored cross-site scripting (XSS) vulnerability…

published August 16, 2023

CVSS
—
EPSS
0%
Percentile
40.5
In the wild
Unconfirmed
What it is

Jenkins Shortcut Job Plugin 0.4 and earlier does not escape the shortcut redirection URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure shortcut jobs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00480 · 40.5th percentile
Published
2023-08-16T14:32Z
EPSS history
Timeline
  • 16 AUG 14:32Z
    Jenkins Shortcut Job Plugin 0.4 and earlier does not escape the shortcut redirection URL, resulting in a stored cross-site scripting (XSS) vulnerability…
    cvelistv5