Description
Jenkins 2.196 and earlier, LTS 2.176.3 and earlier did not restrict or filter values set as Jenkins URL in the global configuration, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Attachment Export Arbitrary File Download (0.2.3)
WebLogic CVE-2020-2546 Vulnerability (CVE-2020-2546)
IBM RTC Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-0748)
WordPress Plugin Comments Like Dislike Security Bypass (1.1.3)
IBM RTC Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-29844)