Advisories for Maven/Org.jenkins-Ci.plugins/Buildgraph-View package

Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL. This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views. As of publication of this advisory, there is no fix.

Jenkins buildgraph-view Plugin does not escape the description of builds shown in its view, resulting in a stored XSS vulnerability exploitable by users able to change build descriptions.