Jenkins: >> Buildgraph-View >> 1.3.1 Security Vulnerabilities
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views.
CVSS Score
5.5
EPSS Score
0.002
Published
2026-05-27
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions.
CVSS Score
5.4
EPSS Score
0.007
Published
2019-12-17