CVE-2013-5573 Jenkins allows Cross-Site Scripting (XSS) in User Configuration
MediumCVSS 4.3
EPSS 5.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.jenkins-ci.main/jenkins-core(Maven) | <= 1.523 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.396 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.397 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.398 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.399 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.400 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.401 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.403 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.404 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.405 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.406 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.407 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.408 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.409 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.409.1 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.409.2 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.409.3 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.410 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.411 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.412 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.413 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.414 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.415 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.416 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.417 | No fix listed |
Show 129 more
| Product | Affected versions | Fixed in |
|---|---|---|
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.418 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.419 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.420 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.421 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.422 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.423 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.424 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.424.1 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.424.2 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.424.3 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.424.4 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.424.5 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.424.6 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.425 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.426 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.427 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.428 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.429 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.430 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.431 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.432 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.433 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.434 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.435 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.436 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.437 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.438 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.439 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.440 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.441 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.442 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.443 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.444 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.445 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.446 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.447 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.447.1 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.447.2 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.448 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.449 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.450 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.451 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.452 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.453 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.454 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.455 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.456 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.457 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.458 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.459 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.460 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.461 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.462 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.463 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.464 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.465 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.466 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.466.1 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.466.2 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.467 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.468 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.469 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.470 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.471 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.472 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.473 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.474 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.475 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.476 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.477 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.478 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.479 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.480 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.480.1 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.480.2 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.480.3 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.481 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.482 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.483 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.484 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.485 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.486 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.487 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.488 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.489 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.490 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.491 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.492 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.493 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.494 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.495 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.496 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.497 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.498 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.499 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.500 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.501 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.502 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.503 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.504 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.505 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.506 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.507 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.508 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.509 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.509.1 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.509.2 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.509.2.JENKINS-14362-jzlib | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.509.2.JENKINS-8856-diag | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.509.3 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.509.3.JENKINS-14362-jzlib | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.509.4 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.510 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.511 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.512 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.513 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.514 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.515 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.516 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.516.JENKINS-14362-jzlib | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.517 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.518 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.518.JENKINS-14362-jzlib | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.519 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.520 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.521 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.522 | No fix listed |
| org.jenkins-ci.main/jenkins-core(Maven) | = 1.523 | No fix listed |
| jenkins | = 1.523 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- jenkins-cve20135573-xss(89872) vdb-entry
- github.com product
- web.archive.org
- packetstormsecurity.com exploit
- 20131217 [CVE-2013-5573] Jenkins v1.523 Default markup formatter permits offsite-bound forms exploit mailing-list
- 20131217 [CVE-2013-5573] Jenkins v1.523 Default markup formatter permits offsite-bound forms mailing-list
- 30408 exploit
- 101187 vdb-entry
- 64414 vdb-entry
- github.com