CVE-2023-35146

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Jenkins Template Workflows Plugin 41.v32d86a_313b_4a and earlier does not escape names of jobs used as buildings blocks for Template Workflow Job, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create jobs.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jun 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-351476.5Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an HTTP endpoint, allowi CVE-2023-351486.5A cross-site request forgery (CSRF) vulnerability in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers to CVE-2023-351496.5A missing permission check in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers with Overall/Read permissi CVE-2023-35154.4Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4.CVE-2023-351508.0XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.40m-2 and pri CVE-2023-351517.5XWiki Platform is a generic wiki platform. Starting in version 7.3-milestone-1 and prior to versions 14.4.8, 14.10.6, and 15.1, ny user can CVE-2023-351528.8XWiki Platform is a generic wiki platform. Starting in version 12.9-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.1, any logged in user CVE-2023-351535.4XWiki Platform is a generic wiki platform. Starting in version 5.4.4 and prior to versions 14.4.8, 14.10.4, and 15.0, a stored cross-site sc CVE-2023-351546.5Knowage is an open source analytics and business intelligence suite. Starting in version 6.0.0 and prior to version 8.1.8, an attacker can r CVE-2023-351556.1XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with CVE-2023-351566.1XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with CVE-2023-351574.8XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to perform an XSS by