Beveiligingsadvies

CVE-2026-92136

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 13:53:11
Laatst bijgewerkt 2026-09-16 19:08:35
Toegewezen door jenkins
CVSS-score 8.0
Status PUBLISHED

Beschrijving

Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.