Em resumo
- CVE-2025-5806 é uma vulnerabilidade ALTO (CVSS 8.0) que afeta org.jenkins-ci.plugins:gatling, gatling (jenkins).
- Chance de exploração nos próximos 30 dias (EPSS): 0.54%, maior que 45.6% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
Description
Jenkins Gatling Plugin 136.vb_9009b_3d33a_e serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting (XSS) vulnerability exploitable by users able to change report content.
NVD description
Jenkins Gatling Plugin 136.vb_9009b_3d33a_e serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting (XSS) vulnerability exploitable by users able to change report content.
Mais vulnerabilidades de org.jenkins-ci.plugins:gatling
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free