CVE-2024-28157

CVE-2024-28157 affects Jenkins GitBucket Plugin, version 0.8 and earlier. The vulnerability is stored cross-site scripting (XSS) caused by unsanitized Gitbucket URLs on build views, exploitable by attackers who can configure jobs. The CVE entry documents the issue and confirms the vulnerability s...