CVE-2023-28678

The CVE-2023-28678 entry concerns Jenkins Cppcheck Plugin, versions 1.26 and earlier. The root cause is that the plugin does not escape file names in Cppcheck report files before displaying them in the Jenkins UI, enabling a stored XSS vulnerability when an attacker controls report contents. Repo...