CVE-2023-35144

Summary

CVE-2023-35144 is a stored cross-site scripting (XSS) vulnerability affecting the Jenkins Maven Repository Server Plugin version 1.10 and earlier. The issue allows attackers to inject malicious scripts into the Build Artifacts As Maven Repository page by exploiting the lack of input validation for project and build display names. Successful exploitation of this vulnerability could result in the execution of malicious code in the context of the affected Jenkins user. It is recommended that users upgrade to a patched version of the plugin to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.