← Back

Maven Repository Server

maven_repository_server

Vendor: Jenkins • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-35144
1Jenkins
1Maven Repository Server
Jun 17, 2026
Jun 14, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape project and build display names on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability.
CVE-2023-35143
1Jenkins
1Maven Repository Server
Jun 17, 2026
Jun 14, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape the versions of build artifacts on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability expl...Show more
Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape the versions of build artifacts on the Build Artifacts As Maven Repository page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control maven project versions in `pom.xml`.Show less