CVEvulnerability
CVE-2013-5573
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.
Affected configurations
• jenkins jenkins 1.523
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.com/files/124513 Exploit
- http://seclists.org/bugtraq/2013/Dec/104 Exploit
- http://seclists.org/fulldisclosure/2013/Dec/159 seclists.org
- http://www.exploit-db.com/exploits/30408 Exploit
- http://www.osvdb.org/101187 www.osvdb.org
- http://www.securityfocus.com/bid/64414 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89872 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.com/files/124513 Exploit
- http://seclists.org/bugtraq/2013/Dec/104 Exploit
- http://seclists.org/fulldisclosure/2013/Dec/159 seclists.org
- http://www.exploit-db.com/exploits/30408 Exploit
- http://www.osvdb.org/101187 www.osvdb.org
- http://www.securityfocus.com/bid/64414 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89872 exchange.xforce.ibmcloud.com