CVE-2023-46659

Jenkins Edgewall Trac Plugin 1.13 and earlier does not escape the Trac website URL on the build page, resulting in a stored cross-site scripting (XSS)…

published October 25, 2023

CVSS
—
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

Jenkins Edgewall Trac Plugin 1.13 and earlier does not escape the Trac website URL on the build page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00459 · 38.8th percentile
Published
2023-10-25T13:45Z
EPSS history
Timeline
  • 25 OCT 13:45Z
    Jenkins Edgewall Trac Plugin 1.13 and earlier does not escape the Trac website URL on the build page, resulting in a stored cross-site scripting (XSS)…
    cvelistv5