~ / search / GHSA-39r8-4962-j7vg

GHSA-39r8-4962-j7vg

Stored XSS vulnerability in Jenkins Maven Repository Server Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-35144

Packages

EcosystemPackageAffectedFixed in
Maven jenkins:repository <= 1.10 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape project and build display names on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability.

References

External links from the advisory. They lead to third-party sites.