Filtered by vendor Jenkins Project
Subscriptions
Filtered by product Jenkins Sonarqube Scanner Plugin
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-84665 | 1 Jenkins Project | 1 Jenkins Sonarqube Scanner Plugin | 2026-09-03 | 8 High |
| Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the `javascript:` scheme, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. | ||||
Page 1 of 1.