{"id":"CVE-2013-6374","aliases":[],"url":"https://o3.security/vulnerability/CVE-2013-6374","summary":"Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.","details":"Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.","published":"2013-11-25T19:55:03.420","modified":"2026-06-17T00:00:22.463","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"http://osvdb.org/100106"},{"type":"ADVISORY","url":"http://secunia.com/advisories/55783"},{"type":"WEB","url":"https://wiki.jenkins-ci.org/display/JENKINS/Build+Failure+Analyzer"},{"type":"ADVISORY","url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20"},{"type":"WEB","url":"http://osvdb.org/100106"},{"type":"ADVISORY","url":"http://secunia.com/advisories/55783"},{"type":"WEB","url":"https://wiki.jenkins-ci.org/display/JENKINS/Build+Failure+Analyzer"},{"type":"ADVISORY","url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T00:00:22.463"}}