Threats tagged 'ghsa-29m4-vpx5-mmrm'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.0	EPSS 0.4%	CVE-2026-92135Jenkins Coverage Plugin · Cross-site Scripting High8.0EPSS 0.4%2026-09-16CVE Database V5CVE-2026-92135 Jenkins Coverage Plugin 3.3358.v9487dde48783 and earlier does not validate the coverage results ID when a job configuration is submitted through the REST API, allowing attackers with Item/Configure permission to use a javascript: scheme URL as identifier, resulting in a stored cross-site scripting (XSS) vulnerability. EPSS 0.4%Vulnerability Jenkins Project CWE-79 #ghsa-29m4-vpx5-mmrm	CVE Database V5	2026-09-16

Page 1 of 1