-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:htmlpublisher | maven | < 1.32.1 | 1.32.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from unescaped insertion of user-controlled values (job names, report names, titles) into HTML/JS contexts. The patch adds 'htmlAttributeEscape()' to these values in HtmlPublisher.java and implements regex checks in index.groovy to block legacy reports with unsafe characters. The affected code paths are clearly identified in the commit diff, directly correlating with the vulnerability description of stored XSS via unescaped attributes and script content.