GHSA-g4qf-5523-7wvf, CVE-2023-41944
maven/org.jenkins-ci.plugins/aws-codecommit-trigger
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not escape the queue name parameter passed to a form validation URL, when rendering an error message, resulting in an HTML injection vulnerability.
All versions up to 3.0.12
Unfortunately, there is no solution available yet.
2024-01-31
source |