Back to search
CVE-2023-41931
Published: Sep 6, 2023
Modified: Sep 26, 2024
PUBLISHED
Description
Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not property sanitize or escape the timestamp value from history entries when rendering a history entry on the history view, resulting in a stored cross-site scripting (XSS) vulnerability.
| Vendor | Product | Versions |
|---|---|---|
Jenkins Project | Jenkins Job Configuration History Plugin | affected 0 - <= 1227.v7a_79fc4dc01f |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now