Cross-Site Scripting Vulnerability in Jenkins Gatling Plugin by Jenkins

CVE-2025-5806

What is CVE-2025-5806?

The Jenkins Gatling Plugin has a flaw that allows attackers to bypass the Content-Security-Policy protections implemented in recent Jenkins versions. This vulnerability can be exploited by users who can modify report content, potentially exposing sensitive data through malicious scripts. Affected versions need immediate attention to mitigate potential risks associated with this XSS attack vector.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References