Aller au contenu
Se connecter
8.0 Élevée

CVE-2025-5806 Jenkins Gatling Plugin 136.vb_9009b_3d33a_e serves Gatling reports in a manner that bypasses the Content-Security-Policy…

Description

Jenkins Gatling Plugin 136.vb_9009b_3d33a_e serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting (XSS) vulnerability exploitable by users able to change report content.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Gatling Plugin Versions non publiées

Autres CVE de Jenkins Gatling Plugin

Les 2 CVE de Jenkins Gatling Plugin →
CVE-2020-2173 Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports… Non notée
Suivre cette CVE