CVE-2025-5806

Jenkins Gatling Plugin 136.vb9009b3d33ae serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting XSS vulnerability exploitable by users able to change report content...

CVE-2025-5806

Jenkins Gatling Plugin 136.vb9009b3d33ae serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting XSS vulnerability exploitable by users able to change report content...

CVE-2025-5806

Jenkins Gatling Plugin 136.vb9009b3d33ae serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting XSS vulnerability exploitable by users able to change report content...

CVE-2025-5806

CVE-2025-5806 affects Jenkins Gatling Plugin 136.vb_9009b_3d33a_e. The vulnerability arises from serving Gatling reports in a way that bypasses CSP protections added in Jenkins 1.641/1.625, enabling cross-site scripting (XSS) exploitable by users who can change report content. CVSSv3.1 base score...

Jenkins plugin (2025-06-06)

According to its self-reported version number, the version of Jenkins plugins running on the remote web server is affected by a vulnerability: - Jenkins Gatling Plugin 136.vb9009b3d33ae serves Gatling reports in a manner that bypasses the Content- Security-Policy protection introduced in Jenkins...