← Back to browse · API

CVE-2024-28156

Severity
MEDIUM
CVSS
5.4
EPSS
0.80173
Risk score
49.66
CISA KEV
No
PoC
No
Published
2024-03-06
Modified
2025-03-27
First seen
2026-08-07
Aliases
EUVD-2024-0830, GHSA-5J5R-6MV9-M255
Products
Jenkins Project:Jenkins Build Monitor View Plugin, Jenkins Project:Jenkins Build Monitor View Plugin 0 ≤1.14-860.vd06ef2568b_3f
Sources
euvd EUVD-2024-0830

Description

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b_3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure Build Monitor Views.

References