Beveiligingsadvies

CVE-2025-30196

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-19 15:38:12

Laatst bijgewerkt 2025-03-19 18:13:51

Toegewezen door jenkins

CVSS-score 6.5

Status PUBLISHED

Beschrijving

Jenkins AnchorChain Plugin 1.0 does not limit URL schemes for links it creates based on workspace content, allowing the `javascript:` scheme, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control the input file for the Anchor Chain post-build step.

← Alle CVE's bekijken Bekijk op cve.org ↗