CVE-2024-28156

Published Mar 6, 2024

Last updated 6 months ago

Overview

Description
Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b_3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure Build Monitor Views.
Source
jenkinsci-cert@googlegroups.com
NVD status
Awaiting Analysis

Social media

Hype score
Not currently trending