CVE-2023-46650

Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site…

published October 25, 2023

CVSS
—
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00606 · 48.3th percentile
Published
2023-10-25T13:45Z
EPSS history
Timeline
  • 25 OCT 13:45Z
    Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site…
    cvelistv5