CVE-2013-5573

Jenkins 1.523 - XSS

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.

Exploits (1)

exploitdb WRITEUP
by Christian Catalano · textwebappsphp
https://www.exploit-db.com/exploits/30408

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/64414
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/101187
Exploit mailing-list x_refsource_bugtraq
http://seclists.org/bugtraq/2013/Dec/104
Mailing List mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2013/Dec/159
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/30408
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/89872

Scores

EPSS 0.0163
EPSS Percentile 82.0%

Details

CWE
CWE-79
Status published
Products (2)
jenkins/jenkins 1.523
org.jenkins-ci.main/jenkins-core 0Maven
Published Dec 31, 2013
Tracked Since Feb 18, 2026