Junglewise Threat Intelligence

CVE-2024-28160: Jenkins iceScrum Plugin vulnerable to stored Cross-site Scripting

CVE-2024-28160 · Severity: low · CVSS 3.1 · Published 2024-03-06

Technologies: org.jenkins-ci.plugins:icescrum (Maven). Vendors: Maven.

Executive brief

Jenkins iceScrum Plugin vulnerable to stored Cross-site Scripting

Affected products

  • Maven org.jenkins-ci.plugins:icescrum

Related threats