deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-28952
Published: 2024-11-13
Description: Uncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01140.html
CVE: CVE-2024-29076
Published: 2024-11-13
Description: Uncaught exception for some Intel(R) CST software before version 8.7.10803 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-248
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01024.html
CVE: CVE-2024-29077
Published: 2024-11-13
Description: Improper access control in some JAM STAPL Player software before version 2.6.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01151.html
CVE: CVE-2024-29079
Published: 2024-11-13
Description: Insufficient control flow management in some Intel(R) VROC software before version 8.6.0.3001 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-691
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01154.html
CVE: CVE-2024-29083
Published: 2024-11-13
Description: Incorrect default permissions in some Intel(R) Distribution for Python software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01165.html
CVE: CVE-2024-29085
Published: 2024-11-13
Description: Improper access control for some BigDL software maintained by Intel(R) before version 2.5.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01146.html
CVE: CVE-2024-31074
Published: 2024-11-13
Description: Observable timing discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-208
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01177.html
CVE: CVE-2024-31154
Published: 2024-11-13
Description: Improper input validation in UEFI firmware for some Intel(R) Server S2600BPBR may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01175.html
CVE: CVE-2024-31158
Published: 2024-11-13
Description: Improper input validation in UEFI firmware in some Intel(R) Server Board S2600BP Family may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01175.html
CVE: CVE-2024-31407
Published: 2024-11-13
Description: Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software for Intel(R) Quartus(R) Prime Pro Edition Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01148.html
CVE: CVE-2024-32044
Published: 2024-11-13
Description: Improper access control for some Intel(R) Arc(TM) Pro Graphics for Windows drivers before version 31.0.101.5319 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01163.html
CVE: CVE-2024-32048
Published: 2024-11-13
Description: Improper input validation in the Intel(R) Distribution of OpenVINO(TM) Model Server software before version 2024.0 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01158.html
CVE: CVE-2024-32483
Published: 2024-11-13
Description: Improper access control for some Intel(R) EMA software before version 1.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01201.html
CVE: CVE-2024-32485
Published: 2024-11-13
Description: Improper Input Validation in some Intel(R) VROC software before version 8.6.0.2003 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 3.9 (LOW)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01154.html
CVE: CVE-2024-32667
Published: 2024-11-13
Description: Out-of-bounds read for some OpenCL(TM) software may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 3.9 (LOW)
CWE: CWE-125
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01163.html
CVE: CVE-2024-33611
Published: 2024-11-13
Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.60 may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 3.4 (LOW)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01167.html
CVE: CVE-2024-33617
Published: 2024-11-13
Description: Insufficient control flow management in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-691
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01177.html
CVE: CVE-2024-33624
Published: 2024-11-13
Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.60 may allow an unauthenticated user to potentially enable denial of service via network access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01167.html
CVE: CVE-2024-34022
Published: 2024-11-13
Description: Improper Access Control in some Thunderbolt(TM) Share software before version 1.0.49.9 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01204.html
CVE: CVE-2024-34023
Published: 2024-11-13
Description: Untrusted pointer dereference in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.4 (HIGH)
CWE: CWE-822
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01132.html
CVE: CVE-2024-34028
Published: 2024-11-13
Description: Uncontrolled search path in some Intel(R) Graphics Offline Compiler for OpenCL(TM) Code software for Windows before version 2024.1.0.142, graphics driver 31.0.101.5445 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01163.html
CVE: CVE-2024-34164
Published: 2024-11-13
Description: Uncontrolled search path element in some Intel(R) MAS software before version 2.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01161.html
CVE: CVE-2024-34165
Published: 2024-11-13
Description: Uncontrolled search path in some Intel(R) oneAPI DPC++/C++ Compiler before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01217.html
CVE: CVE-2024-34167
Published: 2024-11-13
Description: Uncontrolled search path for the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01183.html
CVE: CVE-2024-34170
Published: 2024-11-13
Description: Improper buffer restrictions in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-92
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01132.html
CVE: CVE-2024-34776
Published: 2024-11-13
Description: Out-of-bounds write in some Intel(R) SGX SDK software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-787
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01188.html
CVE: CVE-2024-35201
Published: 2024-11-13
Description: Incorrect default permissions in the Intel(R) SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01179.html
CVE: CVE-2024-35245
Published: 2024-11-13
Description: Uncontrolled search path element in some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.60 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01167.html
CVE: CVE-2024-36242
Published: 2024-11-13
Description: Protection mechanism failure in the SPP for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-693
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01196.html
CVE: CVE-2024-36245
Published: 2024-11-13
Description: Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01187.html
CVE: CVE-2024-36253
Published: 2024-11-13
Description: Uncontrolled search path in the Intel(R) SDP Tool for Windows software all version may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01179.html
CVE: CVE-2024-36275
Published: 2024-11-13
Description: NULL pointer dereference in some Intel(R) Optane(TM) PMem Management software versions before CR_MGMT_02.00.00.4040, CR_MGMT_03.00.00.0499 may allow a authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-395
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01189.html
CVE: CVE-2024-36276
Published: 2024-11-13
Description: Insecure inherited permissions for some Intel(R) CIP software before version 2.4.10852 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-277, CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01182.html
CVE: CVE-2024-36282
Published: 2024-11-13
Description: Improper input validation in the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01183.html
CVE: CVE-2024-36284
Published: 2024-11-13
Description: Improper input validation in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01219.html
CVE: CVE-2024-36294
Published: 2024-11-13
Description: Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-277, CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01200.html
CVE: CVE-2024-36482
Published: 2024-11-13
Description: Improper input validation in some Intel(R) CIP software before version 2.4.10852 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01182.html
CVE: CVE-2024-36488
Published: 2024-11-13
Description: Improper Access Control in some Intel(R) DSA before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01200.html
CVE: CVE-2024-37024
Published: 2024-11-13
Description: Uncontrolled search path for some ACAT software maintained by Intel(R) for Windows before version 3.11.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01176.html
CVE: CVE-2024-37025
Published: 2024-11-13
Description: Incorrect execution-assigned permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installer before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-279
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01197.html
CVE: CVE-2024-37027
Published: 2024-11-13
Description: Improper Input validation in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01187.html
CVE: CVE-2024-38383
Published: 2024-11-13
Description: Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition software for Windows before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01195.html
CVE: CVE-2024-38387
Published: 2024-11-13
Description: Uncontrolled search path in the Intel(R) Graphics Driver installers for versions 15.40 and 15.45 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01191.html
CVE: CVE-2024-38660
Published: 2024-11-13
Description: Protection mechanism failure in the SPP for some Intel(R) Xeon(R) processor family (E-Core) may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 3.8 (LOW)
CWE: CWE-693
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01196.html
CVE: CVE-2024-38665
Published: 2024-11-13
Description: Out-of-bounds write in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01132.html
CVE: CVE-2024-38668
Published: 2024-11-13
Description: Uncontrolled search path for some Intel(R) Quartus(R) Prime Standard Edition software for Windows before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01193.html
CVE: CVE-2024-39285
Published: 2024-11-13
Description: Improper access control in UEFI firmware in some Intel(R) Server M20NTP Family may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01175.html
CVE: CVE-2024-39368
Published: 2024-11-13
Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.0 (HIGH)
CWE: CWE-89
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01219.html
CVE: CVE-2024-39609
Published: 2024-11-13
Description: Improper Access Control in UEFI firmware for some Intel(R) Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01175.html
CVE: CVE-2024-39766
Published: 2024-11-13
Description: Improper neutralization of special elements used in SQL command in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.0 (HIGH)
CWE: CWE-1336
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01219.html
CVE: CVE-2024-39811
Published: 2024-11-13
Description: Improper input validation in firmware for some Intel(R) Server M20NTP Family UEFI may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01175.html
CVE: CVE-2024-40885
Published: 2024-11-13
Description: Use after free in the UEFI firmware of some Intel(R) Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-416
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01175.html
CVE: CVE-2024-41167
Published: 2024-11-13
Description: Improper input validation in UEFI firmware in some Intel(R) Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01175.html
CVE: CVE-2024-45875
Published: 2024-11-13
Description: The create user function in baltic-it TOPqw Webportal 1.35.287.1 (fixed in version1.35.291), in /Apps/TOPqw/BenutzerManagement.aspx/SaveNewUser, is vulnerable to SQL injection. The JSON object username allows the manipulation of SQL queries.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://cyber.wtf/2024/11/11/topqw-webportal-cves/
CVE: CVE-2024-45876
Published: 2024-11-13
Description: The login form of baltic-it TOPqw Webportal v1.35.283.2 (fixed in version 1.35.283.4) at /Apps/TOPqw/Login.aspx is vulnerable to SQL injection. The vulnerability exists in the POST parameter txtUsername, which allows for manipulation of SQL queries.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://cyber.wtf/2024/11/11/topqw-webportal-cves/
CVE: CVE-2024-45877
Published: 2024-11-13
Description: baltic-it TOPqw Webportal v1.35.283.2 is vulnerable to Incorrect Access Control in the User Management function in /Apps/TOPqw/BenutzerManagement.aspx. This allows a low privileged user to access all modules in the web portal, view and manipulate information and permissions of other users, lock other user or unlock the own account, change the password of other users, create new users or delete existing users and view, manipulate and delete reference data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://cyber.wtf/2024/11/11/topqw-webportal-cves/
CVE: CVE-2024-45878
Published: 2024-11-13
Description: The "Stammdaten" menu of baltic-it TOPqw Webportal v1.35.283.2 (fixed in version 1.35.291), in /Apps/TOPqw/qwStammdaten.aspx, is vulnerable to persistent Cross-Site Scripting (XSS).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cyber.wtf/2024/11/11/topqw-webportal-cves/
CVE: CVE-2024-45879
Published: 2024-11-13
Description: The file upload function in the "QWKalkulation" tool of baltic-it TOPqw Webportal v1.35.287.1 (fixed in version 1.35.291), in /Apps/TOPqw/QWKalkulation/QWKalkulation.aspx, is vulnerable to Cross-Site Scripting (XSS). To exploit the persistent XSS vulnerability, an attacker has to be authenticated to the application that uses the "TOPqw Webportal" as a software. When authenticated, the attacker can persistently place the malicious JavaScript code in the "QWKalkulation" menu.'
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cyber.wtf/2024/11/11/topqw-webportal-cves/
CVE: CVE-2024-52549
Published: 2024-11-13
Description: Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files on the controller file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3447
CVE: CVE-2024-52550
Published: 2024-11-13
Description: Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose (Jenkinsfile) script is no longer approved.
CVSS Score: 8.0 (HIGH)
CWE: CWE-354
References: https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3362
CVE: CVE-2024-52551
Published: 2024-11-13
Description: Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved.
CVSS Score: 8.0 (HIGH)
CWE: CWE-276
References: https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3361
CVE: CVE-2024-52552
Published: 2024-11-13
Description: Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3010