CVE-2024-52552
EUVD-2024-321913.11.2024, 21:15
Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| jenkins | authorize_project | 𝑥 ≤ 1.7.2 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| jenkins_project | jenkins_authorize_project_plugin | 𝑥 ≤ 1.7.2 | ADP |