{"id":"CVE-2024-28149","aliases":["EUVD-2024-0881","GHSA-8vcg-v7g4-3vr7","RHSA-2024:3634","RHSA-2024:3635","RHSA-2024:3636","RHSA-2024:4597"],"status":"published","title":"Jenkins HTML Publisher Plugin does not properly sanitize input","description":"Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclusive) does not properly sanitize input, allowing attackers with Item/Configure permission to implement cross-site scripting (XSS) attacks and to determine whether a path on the Jenkins controller file system exists.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00704,"percentile":0.53585,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2024-03-06T17:01:53Z","modified":"2026-10-24T10:30:46Z","fixes":[{"ecosystem":"Maven","package":"org.jenkins-ci.plugins:htmlpublisher","fixed_in":["1.32.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:htmlpublisher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16"},{"fixed":"1.32.1"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:htmlpublisher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16"},{"fixed":"1.32.1"}]}],"versions":["1.16","1.16.1","1.17","1.18","1.19","1.20","1.21","1.22","1.22-beta-1","1.23","1.24","1.25","1.26","1.27","1.28","1.29","1.30","1.31","1.32"]},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.14::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.440.3.1716387933-3.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.14::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.1716388016-1.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.12::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.440.3.1716445200-3.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.12::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.1716445211-1.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.13::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.440.3.1716445150-3.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.13::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.1716445207-1.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.15::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.440.3.1718879390-3.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.15::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.1718879538-1.el8"}]}],"bundled":9}],"products":[{"vendor":"jenkins","product":"html_publisher"},{"vendor":"jenkins project","product":"jenkins html publisher plugin"}],"references":[{"url":"https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3301","tags":["vendor-advisory","x_transferred","Vendor Advisory","advisory","web","article"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/06/3","tags":["x_transferred","Mailing List","article","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28149","tags":["advisory"]},{"url":"https://github.com/jenkinsci/htmlpublisher-plugin/commit/8bf2e2297a86ad50f7567fb953b2f8ec18b2891b","tags":["web"]},{"url":"https://github.com/advisories/GHSA-8vcg-v7g4-3vr7"},{"url":"https://github.com/jenkinsci/htmlpublisher-plugin","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3634","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268227","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278821","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3634.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-48795","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-48795","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-48795","tags":["advisory"]},{"url":"https://access.redhat.com/solutions/7071748","tags":["article"]},{"url":"https://terrapin-attack.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-22201","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-22201","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22201","tags":["advisory"]},{"url":"https://github.com/jetty/jetty.project/issues/11256","tags":["article"]},{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-rggv-cv7r-mw98","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23899","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23899","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23899","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/24/6","tags":["article"]},{"url":"https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3319","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23900","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23900","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23900","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3289","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-24786","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24786","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24786","tags":["advisory"]},{"url":"https://go.dev/cl/569356","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2024-2611","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-28149","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-28149","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-34144","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-34144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34144","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/05/02/3","tags":["article"]},{"url":"https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-34145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-34145","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34145","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3635","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3635.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3636","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3636.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4597","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258725","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4597.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21626","tags":["report"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2024-001","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21626","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21626","tags":["advisory"]},{"url":"https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2024-28149","description":"Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclusive) does not properly sanitize input, allowing attackers with Item/Configure permission to implement cross-site scripting (XSS) attacks and to determine whether a path on the Jenkins controller file system exists.","status":"published","published":"2024-03-06T17:01:53.259Z","modified":"2025-02-13T17:47:17.504Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:18.951288Z"}],"euvd":[{"id":"EUVD-2024-0881","description":"Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclusive) does not properly sanitize input, allowing attackers with Item/Configure permission to implement cross-site scripting (XSS) attacks and to determine whether a path on the Jenkins controller file system exists.","status":"published","published":"2024-03-06T17:01:53Z","modified":"2025-02-13T17:47:17Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T20:53:31.829035Z"}],"ghsa":[{"id":"GHSA-8vcg-v7g4-3vr7","title":"Jenkins HTML Publisher Plugin does not properly sanitize input","description":"Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclusive) does not properly sanitize input, allowing attackers with Item/Configure permission to implement cross-site scripting (XSS) attacks and to determine whether a path on the Jenkins controller file system exists.","status":"published","published":"2024-03-06T18:30:38Z","modified":"2024-12-06T22:00:52Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:38:24.542211Z"}],"nvd":[{"id":"CVE-2024-28149","description":"Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclusive) does not properly sanitize input, allowing attackers with Item/Configure permission to implement cross-site scripting (XSS) attacks and to determine whether a path on the Jenkins controller file system exists.","status":"published","published":"2024-03-06T17:15:10.45Z","modified":"2026-06-17T07:21:05.363Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:09:39.488031Z"}],"osv":[{"id":"CVE-2024-28149","description":"Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclusive) does not properly sanitize input, allowing attackers with Item/Configure permission to implement cross-site scripting (XSS) attacks and to determine whether a path on the Jenkins controller file system exists.","status":"published","published":"2024-03-06T17:15:10.45Z","modified":"2026-10-24T10:30:46.828146803Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:39.569658Z"},{"id":"GHSA-8vcg-v7g4-3vr7","title":"Jenkins HTML Publisher Plugin does not properly sanitize input","description":"Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclusive) does not properly sanitize input, allowing attackers with Item/Configure permission to implement cross-site scripting (XSS) attacks and to determine whether a path on the Jenkins controller file system exists.","status":"published","published":"2024-03-06T18:30:38Z","modified":"2024-12-06T22:22:46.16969Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:42.78452Z"},{"id":"RHSA-2024:3634","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update","status":"published","published":"2024-10-01T23:41:24Z","modified":"2026-10-20T10:02:51Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3635","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update","status":"published","published":"2024-10-01T23:41:35Z","modified":"2026-10-20T10:02:51Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3636","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update","status":"published","published":"2024-10-01T23:41:45Z","modified":"2026-10-20T10:02:52Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:4597","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update","status":"published","published":"2024-10-01T23:42:33Z","modified":"2026-10-20T10:02:54Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"}]}}