CVE-2013-5573
- State
- Published
- Severity
- Not scored
- Published
- Dec 31, 2013
- Updated
- Aug 6, 2024
- Reserved
- Aug 23, 2013
Description
Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 64414vdb-entry
- 101187vdb-entry
- 20131217 [CVE-2013-5573] Jenkins v1.523 Default markup formatter permits offsite-bound formsmailing-list
- 20131217 [CVE-2013-5573] Jenkins v1.523 Default markup formatter permits offsite-bound formsmailing-list
- 30408exploit
- http://packetstormsecurity.com/files/124513
- jenkins-cve20135573-xss(89872)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.