medium5.4
CVE-2023-35144
Stored XSS vulnerability in Jenkins Maven Repository Server Plugin
Impact
Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape project and build display names on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | jenkins:repository | <= 1.10 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Maven Repository Server | through 1.10 |