PT-2020-15302 · Jenkins · Jenkins Gitlab Hook Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Gitlab Hook Plugin versions 1.4.2 and earlier Description: The issue is related to a reflected XSS vulnerability. It occurs because project names in the "build now" endpoint are not properly escaped, allowing for potential exploitatio...