https://bugzilla.redhat.com/show_bug.cgi?id=1875232
--- Doc Text *updated* by Sam Fowler <sfowler(a)redhat.com> ---
A flaw was found in Jenkins in versions prior to 2.251 and LTS 2.235.3. The project naming
strategy description, displayed on item creation, is not properly escaped. This can result
in a stored cross-site scripting (XSS) vulnerability exploitable by users with
Overall/Manage permissions. The highest threat from this vulnerability is to data
confidentiality and integrity.
--
You are receiving this mail because:
You are on the CC list for the bug.