Skip to content
Sign in
8.0 High

CVE-2024-28157 Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored…

Description

Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs.

Affected products and versions

Product Affected versions Fixed in
Jenkins GitBucket Plugin 0.8 earliest → 0.8 No fix stated
jenkins_gitbucket_plugin 0.8 earliest → 0.8 No fix stated
Track this CVE