← Back

Pipeline Aggregator View

pipeline_aggregator_view

Vendor: Jenkins • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-28670
1Jenkins
1Pipeline Aggregator View
Jun 17, 2026
Apr 2, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Jenkins Pipeline Aggregator View Plugin 1.13 and earlier does not escape a variable representing the current view's URL in inline JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by...Show more
Jenkins Pipeline Aggregator View Plugin 1.13 and earlier does not escape a variable representing the current view's URL in inline JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission.Show less
CVE-2019-16564
1Jenkins
1Pipeline Aggregator View
Jun 17, 2026
Dec 17, 2019
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to affects view content such as job display nam...Show more
Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to affects view content such as job display name or pipeline stage names.Show less