Cross-Site Scripting Vulnerability in Jenkins Gatling Plugin by Jenkins

CVE-2025-5806

What is CVE-2025-5806?

The Jenkins Gatling Plugin has a flaw that allows attackers to bypass the Content-Security-Policy protections implemented in recent Jenkins versions. This vulnerability can be exploited by users who can modify report content, potentially exposing sensitive data through malicious scripts. Affected versions need immediate attention to mitigate potential risks associated with this XSS attack vector.

References