-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper output encoding in the RemoteCause's short description generation. The commit diff shows the fix added Util.xmlEscape() to sanitize the host address. The test case CauseSecurity1960Test specifically verifies XSS escaping in this context, confirming this was the vulnerable code path. The function's role in displaying trigger origins matches the vulnerability description of unescaped remote addresses in build triggers.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.main:jenkins-core | maven | <= 2.235.3 | 2.235.4 |
| org.jenkins-ci.main:jenkins-core | maven | >= 2.237, <= 2.251 | 2.252 |