Stored cross-site scripting vulnerability in Jenkins - CVE-2023-27905 (rpm)Deprecated |
ID: oval:org.secpod.oval:def:89521 | Date: (C)2023-04-25 (M)2024-04-26 |
Class: VULNERABILITY | Family: unix |
The host is installed with Jenkins LTS through 2.375.3 or Jenkins rolling through 2.393 and is prone to a stored cross-site scripting vulnerability. A flaw is present in the application, which fails to handle issues in unspecified vectors. Successful exploitation could result in a stored cross-site scripting.
Product: |
Jenkins LTS |
Jenkins rolling release |