AI Score
Confidence
High
EPSS
Percentile
33.0%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not escape Failure Cause names in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or update Failure Causes.