CVE-2025-5806

Name of the Vulnerable Software and Affected Versions Jenkins Gatling Plugin version 136.vb 9009b 3d33a e

Description The issue allows users who can change report content to exploit a cross-site scripting (XSS) vulnerability due to the manner in which Gatling reports are served, bypassing the Content-Security-Policy protection introduced in certain Jenkins versions.

Recommendations For Jenkins Gatling Plugin version 136.vb 9009b 3d33a e, consider disabling the serving of Gatling reports until a patch is available to prevent exploitation of the XSS vulnerability.