Jenkins Build Monitor View Plugin vulnerable to XSS exploitation

CVE-2024-28156

Currently unrated 🤨

Key Information

Vendor: Jenkins
Status: Jenkins Build Monitor View Plugin
Vendor: CVE Published:; 6 March 2024

Summary

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b_3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure Build Monitor Views.

Affected Version(s)

Jenkins Build Monitor View Plugin <= 1.14-860.vd06ef2568b_3f

Timeline

Vulnerability published.
Mar 6, 2024
Vulnerability Reserved.
Mar 5, 2024

Collectors

NVD DatabaseMitre Database