CVE-2025-47885

Name of the Vulnerable Software and Affected Versions: Jenkins Health Advisor by CloudBees Plugin versions 374.v194b d4f0c8c8 and earlier

Description: The issue results in a stored cross-site scripting (XSS) vulnerability. This occurs because the plugin does not escape responses from the Jenkins Health Advisor server, making it exploitable by attackers who can control these responses.

Recommendations: For versions 374.v194b d4f0c8c8 and earlier, update to a version that properly escapes responses from the Jenkins Health Advisor server to prevent stored XSS attacks.