CVE-2023-25762
Cross-site Scripting in Jenkins Pipeline: Build Step Plugin
5.4 MediumFix available
Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
82.1%Up 81.2 points since Feb 16, 2023
What each source reports
NVD Score used
Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.
- Record
CVE-2023-25762- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List
Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.
- Record
CVE-2023-25762- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
EUVDEUVD-2023-0679
Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.
- Record
EUVD-2023-0679- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-9j65-3f2q-8q2r
Cross-site Scripting in Jenkins Pipeline: Build Step Plugin
Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.
- Record
GHSA-9j65-3f2q-8q2r- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
OSV
Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.
- Record
CVE-2023-25762- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVGHSA-9j65-3f2q-8q2r
Cross-site Scripting in Jenkins Pipeline: Build Step Plugin
Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.
- Record
GHSA-9j65-3f2q-8q2r- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
Show 12 moreShow less
OSVRHSA-2023:1866
Red Hat Security Advisory: OpenShift Container Platform 4.10.58 security update
- Record
RHSA-2023:1866- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2023:3195
Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
- Record
RHSA-2023:3195- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:3198
Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
- Record
RHSA-2023:3198- CVSS 3.1
- 9.9 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:3299
Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
- Record
RHSA-2023:3299- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:6171
Red Hat Security Advisory: Red Hat Product OCP Tools 4.11 Openshift Jenkins security update
- Record
RHSA-2023:6171- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:6172
Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update
- Record
RHSA-2023:6172- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:6179
Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update
- Record
RHSA-2023:6179- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7288
Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update
- Record
RHSA-2023:7288- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:0775
Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
- Record
RHSA-2024:0775- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:0776
Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
- Record
RHSA-2024:0776- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:0777
Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
- Record
RHSA-2024:0777- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:0778
Red Hat Security Advisory: Jenkins and Jenkins-2-plugins security update
- Record
RHSA-2024:0778- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.jenkins-ci.plugins:pipeline-build-stepMaven | through 2.18 | 2.18.1 |
org.jenkins-ci.plugins:pipeline-build-stepMaven | before 2.18.1, plus listed versions 2.02.12.102.112.12 Show 18 moreShow less2.132.13.12.142.152.15.12.15.22.162.172.182.22.32.42.52.5.12.62.72.82.9 | 2.18.1 |
jenkins-2-pluginsRed Hat:openshift:4.10::el8 From an advisory covering 2 CVEs | before 0:4.10.1681719745-1.el8 | 0:4.10.1681719745-1.el8 |
jenkins-2-pluginsRed Hat:ocp_tools:4.12::el8 From an advisory covering 6 CVEs | before 0:4.12.1683009955-1.el8 | 0:4.12.1683009955-1.el8 |
jenkinsRed Hat:ocp_tools:4.12::el8 From an advisory covering 6 CVEs | before 0:2.387.1.1683009767-3.el8 | 0:2.387.1.1683009767-3.el8 |
jenkins-2-pluginsRed Hat:ocp_tools:4.11::el8 From an advisory covering 22 CVEs | before 0:4.11.1683009941-1.el8 | 0:4.11.1683009941-1.el8 |
jenkinsRed Hat:ocp_tools:4.11::el8 From an advisory covering 22 CVEs | before 0:2.387.1.1683009763-3.el8 | 0:2.387.1.1683009763-3.el8 |
jenkins-2-pluginsRed Hat:ocp_tools:4.13::el8 From an advisory covering 16 CVEs | before 0:4.13.1684911916-1.el8 | 0:4.13.1684911916-1.el8 |
jenkinsRed Hat:ocp_tools:4.13::el8 From an advisory covering 16 CVEs | before 0:2.387.3.1684911776-3.el8 | 0:2.387.3.1684911776-3.el8 |
jenkins-2-pluginsRed Hat:ocp_tools:4.11::el8 From an advisory covering 9 CVEs | before 0:4.11.1698299029-1.el8 | 0:4.11.1698299029-1.el8 |
Show 15 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jenkinsRed Hat:ocp_tools:4.11::el8 From an advisory covering 9 CVEs | before 0:2.414.3.1698298955-3.el8 | 0:2.414.3.1698298955-3.el8 |
jenkins-2-pluginsRed Hat:ocp_tools:4.12::el8 From an advisory covering 10 CVEs | before 0:4.12.1698294000-1.el8 | 0:4.12.1698294000-1.el8 |
jenkinsRed Hat:ocp_tools:4.12::el8 From an advisory covering 10 CVEs | before 0:2.414.3.1698293911-3.el8 | 0:2.414.3.1698293911-3.el8 |
jenkins-2-pluginsRed Hat:ocp_tools:4.13::el8 From an advisory covering 8 CVEs | before 0:4.13.1698292274-1.el8 | 0:4.13.1698292274-1.el8 |
jenkinsRed Hat:ocp_tools:4.13::el8 From an advisory covering 8 CVEs | before 0:2.414.3.1698292201-3.el8 | 0:2.414.3.1698292201-3.el8 |
jenkins-2-pluginsRed Hat:ocp_tools:4.14::el8 From an advisory covering 8 CVEs | before 0:4.14.1699356715-1.el8 | 0:4.14.1699356715-1.el8 |
jenkinsRed Hat:ocp_tools:4.14::el8 From an advisory covering 8 CVEs | before 0:2.414.3.1699356615-3.el8 | 0:2.414.3.1699356615-3.el8 |
jenkins-2-pluginsRed Hat:ocp_tools:4.11::el8 From an advisory covering 11 CVEs | before 0:4.11.1706516946-1.el8 | 0:4.11.1706516946-1.el8 |
jenkinsRed Hat:ocp_tools:4.11::el8 From an advisory covering 11 CVEs | before 0:2.426.3.1706516929-3.el8 | 0:2.426.3.1706516929-3.el8 |
jenkins-2-pluginsRed Hat:ocp_tools:4.13::el8 From an advisory covering 10 CVEs | before 0:4.13.1706516346-1.el8 | 0:4.13.1706516346-1.el8 |
jenkinsRed Hat:ocp_tools:4.13::el8 From an advisory covering 10 CVEs | before 0:2.426.3.1706516254-3.el8 | 0:2.426.3.1706516254-3.el8 |
jenkins-2-pluginsRed Hat:ocp_tools:4.14::el8 From an advisory covering 17 CVEs | before 0:4.14.1706516441-1.el8 | 0:4.14.1706516441-1.el8 |
jenkinsRed Hat:ocp_tools:4.14::el8 From an advisory covering 17 CVEs | before 0:2.426.3.1706516352-3.el8 | 0:2.426.3.1706516352-3.el8 |
jenkins-2-pluginsRed Hat:ocp_tools:4.12::el8 From an advisory covering 24 CVEs | before 0:4.12.1706515741-1.el8 | 0:4.12.1706515741-1.el8 |
jenkinsRed Hat:ocp_tools:4.12::el8 From an advisory covering 24 CVEs | before 0:2.426.3.1706515686-3.el8 | 0:2.426.3.1706515686-3.el8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-25762 is a medium vulnerability (CVSS 5.4) in Jenkins Project Pipeline: Build Step Plugin, published February 15, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 82.1%, the 99th percentile. Fixed in org.jenkins-ci.plugins:pipeline-build-step 2.18.1.
References
jenkins.io/security/advisory/2023-02-15
openwall.com/lists/oss-security/2023/02/15/4
nvd.nist.gov/vuln/detail/CVE-2023-25762
github.com/jenkinsci/pipeline-build-step-plugin/commit/0eaf88a695244ddb69d16c11b96659167dbead92
Show 194 moreShow less
access.redhat.com/errata/RHSA-2023:1866
docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html
bugzilla.redhat.com/show_bug.cgi?id=2135435
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1866.json
cve.org/CVERecord?id=CVE-2023-25761
blogs.apache.org/security/entry/cve-2022-42889
lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om
seclists.org/oss-sec/2022/q4/22
maven.apache.org/docs/3.8.1/release-notes.html
bitbucket.org/snakeyaml/snakeyaml/issues/525
mail-archive.com/dev@mina.apache.org/msg39312.html
issues.redhat.com/browse/PITEAM-10
tanzu.vmware.com/security/cve-2022-22978
commons.apache.org/proper/commons-fileupload/security-reports.html
go.dev/issue/63417
pkg.go.dev/vuln/GO-2023-2102
cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products
groups.google.com/g/golang-announce/c/nqrv9fbR0zE
spring.io/blog/2023/03/20/spring-framework-6-0-7-and-5-3-26-fix-cve-2023-20860-and-cve-2023-20861
rfc-editor.org/rfc/rfc9110
This page doesn't list everything
Left out here: 137 references. The JSON record has them.