CVE Intelligence

Vulnerabilidades do Jenkins Project Jenkins SonarQube Scanner Plugin

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Jenkins Project Jenkins SonarQube Scanner Plugin: 1 registro(s), com versões afetadas e correções.

CVE-2026-84665 Alta · 8.0 CWE-79 02/09/2026
Cross-site Scripting (XSS) em Jenkins Project Jenkins SonarQube Scanner Plugin
Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the `javascript:` scheme, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.