CVE-2024-28157

The Jenkins GitBucket Plugin (version 0.8 and earlier) is vulnerable to a stored cross-site scripting (XSS) attack. The root cause is a failure to sanitize Gitbucket URLs on build views. An attacker with the ability to configure jobs can set the Gitbucket URL to a javascript: URI (e.g., javascrip...