CyberRota Analysis
AI-GeneratedThe Jenkins Warnings Plugin is vulnerable due to inadequate validation of analysis results IDs when job configurations are submitted via the REST API, allowing attackers with Item/Configure permissions to exploit this flaw. This results in a stored cross-site scripting (XSS) vulnerability, which can lead to unauthorized script execution in the context of users accessing the affected Jenkins instance. Organizations using Jenkins with the Warnings Plugin should prioritize addressing this vulnerability to mitigate potential security risks.
Original NVD Description
Jenkins Warnings Plugin 13.10258.va_17d49a_78c3b_ and earlier does not validate the analysis results ID when a job configuration is submitted through the REST API, allowing attackers with Item/Configure permission to use a javascript: scheme URL as identifier, resulting in a stored cross-site scripting (XSS) vulnerability.