CVE-2023-32977 (published 2023-05-16T15:59:58.835Z)
Jenkins Pipeline: Job Plugin does not escape the display name of the build that caused an earlier build to be aborted, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set build display names immediately.
Affected products: Vendor: Jenkins Project
Product: Jenkins Pipeline: Job Plugin
Versions: 1295.v395eb_7400005, 1289.1291.vb_7c188e7e7df, 1207.1209.v69351208a_5a_7