Unrated
Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing...
CVE-2026-117622
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Jenkins Project | Jenkins | — | — |
Original description The description as published by the source.
Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse interface to the controller, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers in control of agent processes.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web jenkins.io
- web nvd.nist.gov
- web github.com