Security Advisory

CVE-2026-48927

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-27 14:13:53
Last updated 2026-05-27 15:20:35
Assigner jenkins
CVSS score not scored
State PUBLISHED

Description

Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views.