Cross-Site Scripting Vulnerability in Jenkins Warnings Next Generation Plugin

CVE-2019-1003023

What is CVE-2019-1003023?

A cross-site scripting vulnerability has been identified in the Jenkins Warnings Next Generation Plugin, specifically affecting versions 1.0.1 and earlier. This vulnerability allows attackers, who can manipulate the warnings parser input, to have Jenkins generate arbitrary HTML content. This scenario poses a risk to the integrity of the application and could lead to exploitation, where an attacker may inject malicious scripts that execute in the browsers of users accessing the Jenkins interface.

References