Package · Maven

io.jenkins.plugins:coverage

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.0

CVE-2025-67641

Jenkins Coverage Plugin has a stored cross-site scripting (XSS) vulnerability

Jenkins Coverage Plugin 2.3054.ve1ff7b_a_a_123b_ and earlier does not validate the configured coverage results ID when creating coverage results, only when submitting the job configuration through the UI, allowing attackers with Item/Configure permission to u…

Jenkins Project Jenkins Coverage Plugin io.jenkins.plugins:coverage Web / CMS Maven

Dec 10, 2025