https://bugzilla.redhat.com/show_bug.cgi?id=1874830
--- Doc Text *updated* by Eric Christensen <sparks(a)redhat.com> ---
A flaw was found in Jenkins in versions prior to 2.251 and LTS 2.235.3. Tooltip values,
which are not properly escaped, can be contributed by plugins and use user-specified
values. This results in a potential stored cross-site scripting (XSS) vulnerability. This
highest threat from this vulnerability is to data confidentiality and integrity.
--
You are receiving this mail because:
You are on the CC list for the bug.