-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability occurs in HTML generation of plugin download pages where required core versions from plugin metadata are rendered unsanitized. The primary vulnerable function would be the HTML rendering method handling plugin data injection (HtmlOutputFormatter.writePluginRow), as this is where XSS would occur during output generation. Plugin.addVersion is included with lower confidence as it processes raw input but doesn't directly cause XSS. Analysis based on advisory details about unsanitized rendering and the security fix commit focusing on output filtering.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci:update-center2 | maven | >= 3.13, < 3.15 | 3.15 |
JavaJavaOngoing coverage of React2Shell