Package · Maven

org.jenkins-ci.plugins:authorize-project

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.0

CVE-2024-52552

Stored XSS vulnerability in Jenkins Authorize Project Plugin

Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Jenkins Project Jenkins Authorize Project Plugin org.jenkins-ci.plugins:authorize-project Web / CMS Maven

Nov 13, 2024