CVE-2013-5573 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 5.4% (pctl 92)
Patch early
A public exploit exists.
Description
Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| EPSS | 5.41% — more likely to be exploited than 92% of all CVEs |
| Weakness | CWE-79 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2013-12-31 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| jenkins | jenkins |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Jenkins 1.523 - Persistent HTML Code | 2013-12-18 |
References
- http://packetstormsecurity.com/files/124513
- http://seclists.org/bugtraq/2013/Dec/104
- http://seclists.org/fulldisclosure/2013/Dec/159
- http://www.exploit-db.com/exploits/30408
- http://www.osvdb.org/101187
- http://www.securityfocus.com/bid/64414
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89872
- http://packetstormsecurity.com/files/124513
- http://seclists.org/bugtraq/2013/Dec/104
- http://seclists.org/fulldisclosure/2013/Dec/159
- http://www.exploit-db.com/exploits/30408
- http://www.osvdb.org/101187
- http://www.securityfocus.com/bid/64414
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89872
→ the Explorer · watch your stack · NVD