| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci:update-center2 | ≥ 3.13, < 3.15 | 3.15 |
| update-center2 | = 3.13= 3.14 |
Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a plugin for hosting.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free