CVE-2024-52552

Name of the Vulnerable Software and Affected Versions Jenkins Authorize Project Plugin versions 1.7.2 and earlier

Description The issue is related to a stored cross-site scripting (XSS) vulnerability. It occurs when a string containing the job name is evaluated with JavaScript on the Authorization view. This vulnerability is exploitable by attackers with Item/Configure permission.

Recommendations For Jenkins Authorize Project Plugin versions 1.7.2 and earlier, update to version 1.8.0 or later, which no longer evaluates a string containing the job name with JavaScript on the Authorization view.