Product · Jenkins Project

Jenkins Cppcheck Plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.4

CVE-2023-28678

Jenkins Cppcheck Plugin vulnerable to stored cross-site scripting (XSS)

Jenkins Cppcheck Plugin 1.26 and earlier does not escape file names from Cppcheck report files before showing them on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control report file contents.

Jenkins Project Jenkins Cppcheck Plugin org.jenkins-ci.plugins:cppcheck Web / CMS Maven

Mar 23, 2023