CVE-2023-35145

Summary of CVE-2023-35145 (Jenkins Sonargraph Integration Plugin) Affected: Jenkins Sonargraph Integration Plugin 5.0.1 and earlier. Issue: The plugin does not escape the file path and the project name in the Log file field form validation, leading to a stored cross-site scripting (XSS) vulnerabi...

CVE-2020-2201

The CVE-2020-2201 entry concerns Jenkins Sonargraph Integration Plugin versions 3.0.0 and earlier, where the Log file field form validation does not escape the file path, causing a stored cross-site scripting (XSS) vulnerability. Affected component: Sonargraph Integration Plugin; root cause: lack...