Jenkins update-center2 3.13 and 3.14... CVE-2023-27905

- AV AC AU C I A
发布： 2023-03-10
修订： 2025-02-28

Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a plugin for hosting.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有2条受影响产品信息