CVE-2013-5573

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 5.4%

from disclosure to weapon0 days

Published on NVDDec 31

1st PoCDec 18

exploitation probability

5.4%top 8% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/30408unverified cve_referencepacketstormsecurity.com/files/124513unverified cve_referencewww.exploit-db.com/exploits/30408unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/124513 http://seclists.org/bugtraq/2013/Dec/104 http://seclists.org/fulldisclosure/2013/Dec/159 https://exchange.xforce.ibmcloud.com/vulnerabilities/89872 http://www.exploit-db.com/exploits/30408 http://www.osvdb.org/101187 http://www.securityfocus.com/bid/64414