CVE-2023-28670 in Aggregator View Plugin
الملخص
بحسب MITRE • 02/04/2023
Jenkins Pipeline Aggregator View Plugin 1.13 and earlier does not escape a variable representing the current view's URL in inline JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.