CVE-2023-4303

MediumCVSS 4.3

Published: 21/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

33th percentile - higher than 33% of all known CVEs

Summary

Jenkins Fortify Plugin version 22.1.38 and earlier does not escape the error message for a form validation method, resulting in an HTML injection vulnerability.

Risk Assessment

An attacker could exploit this vulnerability to inject malicious HTML code, potentially leading to data theft or user interface manipulation.

Recommendation

It is recommended to update the Fortify plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Jenkins Fortify Plugin 22.1.38 and earlier does not escape the error message for a form validation method, resulting in an HTML injection vulnerability.