CVE-2023-41944 (published 2023-09-06T12:09:01.584Z)
Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not escape the queue name parameter passed to a form validation URL, when rendering an error message, resulting in an HTML injection vulnerability.
Affected products: Vendor: Jenkins Project
Product: Jenkins AWS CodeCommit Trigger Plugin
Versions: 0