Package · Maven

org.jenkins-ci.plugins:trac

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.0

CVE-2023-46659

Jenkins Edgewall Trac Plugin vulnerable to Stored XSS

Jenkins Edgewall Trac Plugin 1.13 and earlier does not escape the Trac website URL on the build page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

Jenkins Project Jenkins Edgewall Trac Plugin org.jenkins-ci.plugins:trac Web / CMS Maven

Oct 25, 2023