Executive brief
Stored XSS vulnerability in Jenkins GitHub Plugin
Affected products
- Maven com.coravy.hudson.plugins.github:github
Junglewise Threat Intelligence
CVE-2023-46650: Stored XSS vulnerability in Jenkins GitHub Plugin
CVE-2023-46650 · Severity: low · CVSS 3.1 · Published 2023-10-25
Technologies: com.coravy.hudson.plugins.github:github (Maven). Vendors: Maven.
Related threats
- Jenkins GitHub Plugin stored XSS in job URL validation
- Jenkins GitHub plugin uses weak webhook signature function
- Jenkins GitHub Plugin exposure of sensitive information vulnerability exists
- Jenkins GitHub Plugin server-side request forgery vulnerability exists
- CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials