Vulnerability Details CVE-2023-4303
Jenkins Fortify Plugin 22.1.38 and earlier does not escape the error message for a form validation method, resulting in an HTML injection vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.6%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2023-4303
-
cpe:2.3:a:jenkins:fortify:19.1.28
-
cpe:2.3:a:jenkins:fortify:19.1.29
-
cpe:2.3:a:jenkins:fortify:19.2.30
-
cpe:2.3:a:jenkins:fortify:20.1.32
-
cpe:2.3:a:jenkins:fortify:20.1.33
-
cpe:2.3:a:jenkins:fortify:20.2.34
-
cpe:2.3:a:jenkins:fortify:20.2.35
-
cpe:2.3:a:jenkins:fortify:21.1.36
-
cpe:2.3:a:jenkins:fortify:21.1.38
-
cpe:2.3:a:jenkins:fortify:21.2.37