PT-2026-44020

CVE-2026-48927

Published

2026-05-27

Updated

2026-05-27

Description by

CVSS 3.1

5.5

Medium

MetricsAV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Jenkins buildgraph-view Plugin versions prior to 1.9

Description The buildgraph-view Plugin fails to escape the build URL, leading to a stored cross-site scripting (XSS) issue. This can be exploited by attackers who have permissions to configure jobs or views. Cross-site scripting is a flaw that allows an attacker to inject malicious scripts into web pages viewed by other users.

Recommendations Update to a version later than 1.8.

Exploitability

Fix

Impacts

Researchers

Dyingman1

Vendors

Affected products

Weakness enumeration

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers

CVE-2026-48927