Veille CVE

Recherche « Jenkins Project Jenkins Coverage Plugin »

1 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Jenkins Project Jenkins Coverage Plugin » ✕
  1. CVE-2026-92135 8.0 Élevée

    Jenkins Project Jenkins Coverage Plugin

    Jenkins Coverage Plugin 3.3358.v9487dde48783 and earlier does not validate the coverage results ID when a job configuration is submitted through the REST API, allowing attackers with Item/Configure permission to use a javascript: scheme URL as identifier, resulting in a stored cross-site scripting (XSS) vulnerability.