CVE-2023-41931: XSS
Published Sep 6, 2023
·Updated
Jenkins Job Configuration History Plugin 1227.v7a79fc4dc01f and earlier does not property sanitize or escape the timestamp value from history entries when rendering a history entry on the history view, resulting in a stored cross-site scripting (XSS) vulnerability.
Affected Software
2 affected componentsFixes available
jenkins Job Configuration History Jenkins<=1227.v7a_79fc4dc01f
maven/org.jenkins-ci.plugins:jobConfigHistory<=1227.v7a
1229.v3039470161a_d
Event History
Sep 6, 2023
CVE Published
12:08 PM
Data Sourced
12:08 PM
Description
Advisory Published
via GitHub·03:30 PM
Frequently Asked Questions
1
What is the vulnerability ID for this Jenkins Job Configuration History Plugin vulnerability?
The vulnerability ID for this Jenkins Job Configuration History Plugin vulnerability is CVE-2023-41931.
2
What is the severity level of CVE-2023-41931?
The severity level of CVE-2023-41931 is medium (5.4).
3
How does CVE-2023-41931 affect the software?
CVE-2023-41931 affects Jenkins Job Configuration History Plugin version 1227.v7a_79fc4dc01f and earlier.
4
What is the CWE category for CVE-2023-41931?
The CWE category for CVE-2023-41931 is CWE-79 (Cross-Site Scripting).
5
How can I fix CVE-2023-41931?
To fix CVE-2023-41931, update Jenkins Job Configuration History Plugin to a version later than 1227.v7a_79fc4dc01f.