CVE-2023-41931

Summary

CVE	CVE-2023-41931
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2023-09-06 13:15:00 UTC
Updated	2023-09-11 19:55:00 UTC
Description	Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not property sanitize or escape the timestamp value from history entries when rendering a history entry on the history view, resulting in a stored cross-site scripting (XSS) vulnerability.

Risk And Classification

Problem Types: CWE-79

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Jenkins	Job Configuration History	All	All	All	All

References

Reference	Source	Link	Tags
oss-security - Multiple vulnerabilities in Jenkins plugins	MISC	www.openwall.com
Jenkins Security Advisory 2023-09-06	MISC	www.jenkins.io
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

996988 Java (Maven) Security Update for org.jenkins-ci.plugins:jobConfigHistory (GHSA-5jxp-f5rr-g6jc)