Description
Cross-site scripting (XSS) vulnerability in Jenkins Core in Jenkins before 1.438, and 1.409 LTS before 1.409.3 LTS, when a stand-alone container is used, allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Booking Calendar Multiple Vulnerabilities (3.0.0)
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8657)
PostgreSQL CVE-2018-1058 Vulnerability (CVE-2018-1058)
Grafana Improper Synchronization Vulnerability (CVE-2023-2801)
WordPress Plugin Advanced Custom Fields (ACF) Cross-Site Scripting (6.1.5)