漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Jenkins Coverage Plugin 2.3054.ve1ff7b_a_a_123b_ and earlier does not validate the configured coverage results ID when creating coverage results, only when submitting the job configuration through the UI, allowing attackers with Item/Configure permission to use a `javascript:` scheme URL as identifier by configuring the job through the REST API, resulting in a stored cross-site scripting (XSS) vulnerability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jenkins Coverage Plugin 安全漏洞
Vulnerability Description
Jenkins Coverage Plugin是Jenkins开源的一个插件。 Jenkins Coverage Plugin 2.3054.ve1ff7b_a_a_123b_及之前版本存在安全漏洞，该漏洞源于未验证配置的覆盖率结果ID，可能导致存储型跨站脚本漏洞。
CVSS Information
N/A
Vulnerability Type
N/A