Jenkins Pipeline Aggregator View Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-04-02. Vendor: Jenkins Project.

CVEs of Jenkins Pipeline Aggregator View Plugin

• CVE-2023-28670 - CVSS 5.4 (medium), 2023-04-02: Jenkins Pipeline Aggregator View Plugin 1.13 and earlier does not escape a variable representing the current view's URL in inline JavaScript, resulting in a…
• CVE-2019-16564 - CVSS 5.4 (medium), 2019-12-17: Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a stored XSS vulnerability exploitable by…