Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5573)

Description

Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.

Remediation

References

CVE-2013-5573

Related Vulnerabilities

WordPress Plugin Random Banner Cross-Site Scripting (1.1.2.1)

Atlassian Jira CVE-2019-20402 Vulnerability (CVE-2019-20402)

Oracle JRE CVE-2013-2442 Vulnerability (CVE-2013-2442)

WordPress Plugin SG Optimizer Multiple Vulnerabilities (3.3.5)

WordPress Plugin Easy Redirect Manager Cross-Site Scripting (2.18.18)

Severity

Medium

Classification

CVE-2013-5573 CWE-707