CVE-2023-28670

Published: 2023-04-02T21:15Z

Last Modified: 2025-02-25T21:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Jenkins Pipeline Aggregator View Plugin 1.13 and earlier does not escape a variable representing the current view's URL in inline JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt