Server side cross-site scripting In org.jenkins-ci.plugins:gitbucket
Description
Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version |
|---|---|---|
 maven |
Aliases
1. 2. 3. 4.
References
1. 2. 3.