Threats tagged 'ghsa-xjjc-6r4m-w362'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-117613Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections after deserialization High2026-10-28GCVE DatabaseCVE-2026-117613 Jenkins versions 2.587 and earlier, including LTS 2.580.1 and earlier, have a vulnerability where item types in collections are not restricted after deserialization. This flaw allows attackers with access to POST config.xml API endpoints to submit crafted configuration files that can lead to stored cross-site scripting (XSS) vulnerabilities. Report on CVE-2026-117613 Vulnerability #ghsa-xjjc-6r4m-w362	GCVE Database	2026-10-28

Page 1 of 1