Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-84665 1 Jenkins Project 1 Jenkins Sonarqube Scanner Plugin 2026-09-03 8 High
Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the `javascript:` scheme, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.