PT-2020-15450 · Cloudbees +1 · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.251 and earlier Jenkins LTS versions 2.235.3 and earlier Description: The issue results from the failure to escape the tooltip content of help icons, leading to a stored cross-site scripting XSS vulnerability. The tooltip...