Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a plugin for hosting.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
jenkins update-center2 3.14 |
||
jenkins update-center2 3.13 |