Jenkins OWASP Dependency-Check Plugin vulnerabilities
1 known vulnerability in Jenkins OWASP Dependency-Check Plugin from Jenkins. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.0average CVSS score
Latest first
- 8.0 High severity
Jenkins OWASP Dependency-Check Plugin: Improper Neutralization of Input During Web Page Generation
Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.