Skip to content
OpenAdvisories

Archive

December 2013

Vulnerabilities first published in this month (UTC), newest first.

1 result · Clear filters · Feed

  • Low —
    CVE-2013-5573 Public exploit

    Jenkins allows Cross-Site Scripting (XSS) in User Configuration

    Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.