Executive brief
Jenkins allows Cross-Site Scripting (XSS) in User Configuration
Affected products
- Maven org.jenkins-ci.main:jenkins-core
Junglewise Threat Intelligence
CVE-2013-5573: Jenkins allows Cross-Site Scripting (XSS) in User Configuration
CVE-2013-5573 · Severity: medium · CVSS 4 · Published 2022-05-17
Technologies: org.jenkins-ci.main:jenkins-core (Maven). Vendors: Maven.
Related threats
- Jenkins stored XSS in node offline cause description
- Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation
- Jenkins arbitrary file write via symbolic link extraction in archives
- Jenkins CSRF protection bypass vulnerability
- Jenkins vulnerable to stored cross site scripting in the I:helpIcon component