1 matches found
Stored XSS vulnerability in queue item tooltip
Jenkins did not escape the reason a queue item is blocked in tooltips. This resulted in a cross-site scripting vulnerability exploitable by attackers able to control the reason a queue item is blocked, for example a label expression that does not match idle executors. Jenkins now escapes the reas...
5.4CVSS5.3AI score0.01033EPSS
SaveExploits0Affected Software1
20