Skip to main content

Authorize Project

1 CVEs product

Monthly

CVE-2024-52552 Maven HIGH PATCH This Week

Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Jenkins Authorize Project
NVD
CVSS 3.1
8.0
EPSS
0.7%
EPSS 1% CVSS 8.0
HIGH PATCH This Week

Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Jenkins Authorize Project
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy