CVE-2018-1000108

Name of the Vulnerable Software and Affected Versions: Jenkins CppNCSS Plugin version 1.1 and earlier

Description: A cross-site scripting issue exists in the AbstractProjectAction/index.jelly file, allowing an attacker to create links to Jenkins URLs that execute arbitrary JavaScript code in the user's browser when accessed.

Recommendations: For Jenkins CppNCSS Plugin version 1.1 and earlier, consider disabling access to the AbstractProjectAction/index.jelly file until a patch is available. Restrict user interaction with potentially malicious links to minimize the risk of exploitation.