QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2023-41930

Back to search

CVE-2023-41930

Published: Sep 6, 2023

Modified: Sep 26, 2024

PUBLISHED

Description

Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict the 'name' query parameter when rendering a history entry, allowing attackers to have Jenkins render a manipulated configuration history that was not created by the plugin.

VendorProductVersions

Jenkins Project

Jenkins Job Configuration History Plugin

affected
0 - <= 1227.v7a_79fc4dc01f

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now