Jenkins Build Monitor View Plugin vulnerable to XSS exploitation
CVE-2024-28156

5.4MEDIUM

Key Information:

Vendor: Jenkins
Status: Jenkins Build Monitor View Plugin
Vendor: CVE Published:; 6 March 2024

What is CVE-2024-28156?

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b_3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure Build Monitor Views.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Jenkins Build Monitor View Plugin 0 <= 1.14-860.vd06ef2568b_3f

References

https://www.jenkins.io/security/advisory/2024-03-06/#SECU...

vendor-advisory

http://www.openwall.com/lists/oss-security/2024/03/06/3

EPSS Score

44% chance of being exploited in the next 30 days.

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Mar 6, 2024
Vulnerability Reserved
Mar 5, 2024

JSON

Jenkins