CVE 2023-27905

相關問題 & 資訊整理

CVE 2023-27905

2023年3月8日 — Aqua Research revealed a chain of vulnerabilities CVE-2023-27898, CVE-2023-27905 in Jenkins Server & Update Center which could lead to a ... ,2023年3月10日 — Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, ...,2023年3月9日 — 简述: 该漏洞存在于update-center2中,是一个跨站脚本漏洞。update-center2 在提取插件元数据时未经过校验,攻击者通过上传特制的文件时可能导致触发存储 ...,2023年3月10日 — Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, ...,2023年3月10日 — Description. Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, ...,CVE-2023-27905 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') · NVD · GitHub · Actions · Uses vulnerable functionality. ,2023年3月8日 — XSS vulnerability in update-center2. SECURITY-3063 / CVE-2023-27905. Severity (CVSS): Medium Description: update-center2 is the tool used to ... ,A vulnerability classified as problematic was found in Jenkins update-center2 3.13/3.14. This vulnerability is known as CVE-2023-27905. ,2023年3月10日 — CVE-2023-27905 : Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without ... ,2023年3月8日 — Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, ...

相關軟體 Visual Studio Community 資訊

Visual Studio Community
Visual Studio Community 是一個功能齊全,可擴展的免費 IDE,用於為 Android,iOS,Windows 以及 Web 應用程序和雲服務創建現代應用程序。嘗試用於 Windows PC 的 Visual Studio Community,以獲得功能齊全且可擴展的 IDE; Visual Studio Express. A 的全新替代方案全新的基於工作負載的安裝程序優化了... Visual Studio Community 軟體介紹

CVE 2023-27905 相關參考資料
CorePlague: Critical Vulnerabilities in Jenkins Server Lead to ...

2023年3月8日 — Aqua Research revealed a chain of vulnerabilities CVE-2023-27898, CVE-2023-27905 in Jenkins Server & Update Center which could lead to a ...

https://www.aquasec.com

Cross site scripting vulnerability in update-center2

2023年3月10日 — Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, ...

https://github.com

CVE-2023-2789827905:Jenkins跨站脚本漏洞通告

2023年3月9日 — 简述: 该漏洞存在于update-center2中,是一个跨站脚本漏洞。update-center2 在提取插件元数据时未经过校验,攻击者通过上传特制的文件时可能导致触发存储 ...

https://cert.360.cn

CVE-2023-27905

2023年3月10日 — Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, ...

https://www.tenable.com

CVE-2023-27905 Detail - NVD

2023年3月10日 — Description. Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, ...

https://nvd.nist.gov

CVE-2023-27905 | Vulnerability Database

CVE-2023-27905 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') · NVD · GitHub · Actions · Uses vulnerable functionality.

https://debricked.com

Jenkins Security Advisory 2023-03-08

2023年3月8日 — XSS vulnerability in update-center2. SECURITY-3063 / CVE-2023-27905. Severity (CVSS): Medium Description: update-center2 is the tool used to ...

https://www.jenkins.io

Jenkins update-center2 Version cross site scripting

A vulnerability classified as problematic was found in Jenkins update-center2 3.13/3.14. This vulnerability is known as CVE-2023-27905.

https://vuldb.com

Vulnerability Details : CVE-2023-27905 - Jenkins

2023年3月10日 — CVE-2023-27905 : Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without ...

https://www.cvedetails.com

中危Jenkins 跨站脚本攻击漏洞(CVE-2023-27905)

2023年3月8日 — Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, ...

https://avd.aliyun.com