Jenkins Warnings Plugin
Monthly
Stored cross-site scripting in Jenkins Warnings Plugin 13.10258.va_17d49a_78c3b_ and earlier lets an authenticated attacker holding Item/Configure permission inject a javascript: scheme value as the analysis results identifier by submitting a job configuration through the REST API, bypassing the validation that the normal UI path performs. The payload is persisted with the job and executes in the browser of any user who later opens the affected Warnings/analysis results page (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, 8.0, CWE-79). No public exploit code has been identified at time of analysis, and CISA SSVC rates exploitation as none and automatable as no, although technical impact is rated total; vendor patches are available in 13.10259.v80f407cb_03a_e and the backport 13.10223.10225.vcf001b_b_b_3a_90.
Stored cross-site scripting in Jenkins Warnings Plugin 13.10258.va_17d49a_78c3b_ and earlier lets an authenticated attacker holding Item/Configure permission inject a javascript: scheme value as the analysis results identifier by submitting a job configuration through the REST API, bypassing the validation that the normal UI path performs. The payload is persisted with the job and executes in the browser of any user who later opens the affected Warnings/analysis results page (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, 8.0, CWE-79). No public exploit code has been identified at time of analysis, and CISA SSVC rates exploitation as none and automatable as no, although technical impact is rated total; vendor patches are available in 13.10259.v80f407cb_03a_e and the backport 13.10223.10225.vcf001b_b_b_3a_90.