Description

Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.

Remediation

References

CVE-2013-5573

Related Vulnerabilities

WordPress Plugin SecuPress Pro Security Bypass (1.4.12)

PHP Cryptographic Issues Vulnerability (CVE-2015-8867)

Oracle Database Server CVE-2007-2109 Vulnerability (CVE-2007-2109)

Jboss EAP Cryptographic Issues Vulnerability (CVE-2013-1921)

WebLogic CVE-2018-3246 Vulnerability (CVE-2018-3246)

Severity

Medium

Classification

CVE-2013-5573 CWE-707

Tags

Missing Update Known Vulnerabilities