CVE

Id
65520  
CVE No.
CVE-2013-5573  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.  
Phase
Assigned (20130823)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
639210 65520 CVE-2013-5573 BUGTRAQ:20131217 [CVE-2013-5573] Jenkins v1.523 Default markup formatter permits offsite-bound forms  View
639211 65520 CVE-2013-5573 URL:http://seclists.org/bugtraq/2013/Dec/104  View
639212 65520 CVE-2013-5573 EXPLOIT-DB:30408  View
639213 65520 CVE-2013-5573 URL:http://www.exploit-db.com/exploits/30408  View
639214 65520 CVE-2013-5573 FULLDISC:20131217 [CVE-2013-5573] Jenkins v1.523 Default markup formatter permits offsite-bound forms  View
639215 65520 CVE-2013-5573 URL:http://seclists.org/fulldisclosure/2013/Dec/159  View
639216 65520 CVE-2013-5573 MISC:http://packetstormsecurity.com/files/124513  View
639217 65520 CVE-2013-5573 BID:64414  View
639218 65520 CVE-2013-5573 URL:http://www.securityfocus.com/bid/64414  View
639219 65520 CVE-2013-5573 OSVDB:101187  View
639220 65520 CVE-2013-5573 URL:http://www.osvdb.org/101187  View
639221 65520 CVE-2013-5573 XF:jenkins-cve20135573-xss(89872)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22311 JVNDB-2013-003886 StarUML の WinGraphviz.dll の WINGRAPHVIZLib.NEATO ActiveX コントロールにおけるバッファオーバーフローの脆弱性 StarUML の WinGraphviz.dll の WINGRAPHVIZLib.NEATO ActiveX コントロール内の ToDot メソッドには、バッファオーバーフローの脆弱性が存在します。 CVE-2013-5578 65520 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003886.html  View