CVE-2023-46659 (published 2023-10-25T13:45:58.826Z)
Jenkins Edgewall Trac Plugin 1.13 and earlier does not escape the Trac website URL on the build page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected products: Vendor: Jenkins Project
Product: Jenkins Edgewall Trac Plugin
Versions: 0