diff options
| author | Li-Wen Hsu <lwhsu@FreeBSD.org> | 2023-07-26 15:21:08 +0000 |
|---|---|---|
| committer | Li-Wen Hsu <lwhsu@FreeBSD.org> | 2023-07-26 15:21:08 +0000 |
| commit | 3d4513ad2c1aeb527e7a7eacd893bcaa7c9d794f (patch) | |
| tree | 999eb40791d3b3b8fedf07768ec555e3755a9a77 | |
| parent | df92eba69a94d2a7eb83472f2dd9f99fd38ef5db (diff) | |
| download | ports-3d4513ad2c1aeb527e7a7eacd893bcaa7c9d794f.tar.gz ports-3d4513ad2c1aeb527e7a7eacd893bcaa7c9d794f.zip | |
security/vuxml: Document Jenkins Security Advisory 2023-07-26
Sponsored by: The FreeBSD Foundation
| -rw-r--r-- | security/vuxml/vuln/2023.xml | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml index 2ea5519ff417..7d4b8fcb7d0d 100644 --- a/security/vuxml/vuln/2023.xml +++ b/security/vuxml/vuln/2023.xml @@ -1,3 +1,35 @@ + <vuln vid="a0321b74-031d-485c-bb76-edd75256a6f0"> + <topic>jenkins -- Stored XSS vulnerability</topic> + <affects> + <package> + <name>jenkins</name> + <range><lt>2.416</lt></range> + </package> + <package> + <name>jenkins-lts</name> + <range><lt>2.401.3</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Jenkins Security Advisory:</p> + <blockquote cite="https://www.jenkins.io/security/advisory/2023-07-26/"> + <h1>Description</h1> + <h5>(High) SECURITY-3188 / CVE-2023-39151</h5> + <p>Stored XSS vulnerability</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2023-39151</cvename> + <url>https://www.jenkins.io/security/advisory/2023-07-26/</url> + </references> + <dates> + <discovery>2023-07-26</discovery> + <entry>2023-07-26</entry> + </dates> + </vuln> + <vuln vid="ab0bab3c-2927-11ee-8608-07b8d3947721"> <topic>gitea -- Disallow dangerous URL schemes</topic> <affects> |