Threats tagged 'ghsa-j4wf-9gx8-63f8'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.3%	CVE-2025-53658Org.jenkins ci.plugins:applitools eyes: Jenkins Applitools Eyes Plugin vulnerable to XSS through its Build page Medium5.4EPSS 0.3%2025-07-09GCVE DatabaseCVE-2025-53658 Jenkins Applitools Eyes Plugin versions 1.16.5 and earlier contain a stored cross-site scripting (XSS) vulnerability due to improper escaping of the Applitools URL on the build page. This flaw allows attackers with Item/Configure permissions to inject malicious scripts. The vulnerability is fixed in version 1.16.6, which rejects URLs containing HTML metacharacters. EPSS 0.3%Report on CVE-2025-53658 Vulnerability CWE-79 #ghsa-j4wf-9gx8-63f8 #maven	GCVE Database	2025-07-09

Page 1 of 1