CyberRota Analysis
AI-GeneratedThe Jenkins Qualys Container Scanning Connector Plugin versions 1.8.0.5 and earlier are vulnerable to a stored cross-site scripting (XSS) attack due to inadequate escaping of user-controlled field values in a JavaScript context. This vulnerability can be exploited by users with Item/Configure permissions, potentially allowing attackers to execute malicious scripts in the context of other users. Organizations using affected versions of Jenkins should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape user-controlled field values in a JavaScript context, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.