Jenkins Project Jenkins

CVE-2026-117623
Non disponible

En bref

Source
CVE.org
EPSS
EPSS 0.18 % · centile 8 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
jenkins

Description

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar overflow menu entries, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Read permission.

Références

Références européennes

Produits affectés

ProduitVersions
Jenkins Project · Jenkinsunaffected 2.588 < * ; unaffected 2.580.2 < 2.580.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged