CVE-2023-39151 | BDVDB-2026-208136 Detail

Description#

Jenkins 2.415 and earlier, LTS 2.401.2 and earlier does not sanitize or properly encode URLs in build logs when transforming them into hyperlinks, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control build log contents.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-07-26Record published in the CVE List.
2. Version 22024-10-21Most recent update recorded in the CVE List.