Description
Jenkins Fortify Plugin 22.1.38 and earlier does not escape the error message for a form validation method, resulting in an HTML injection vulnerability.
Remediation
References
https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3140
Related Vulnerabilities
CVE-2019-10320 Vulnerability in maven package org.jenkins-ci.plugins:credentials
CVE-2019-10212 Vulnerability in maven package io.undertow:undertow-core
CVE-2015-2080 Vulnerability in maven package org.eclipse.jetty.aggregate:jetty-all
CVE-2016-3092 Vulnerability in maven package commons-fileupload:commons-fileupload
CVE-2021-46365 Vulnerability in maven package info.magnolia:magnolia-core