Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_gatling_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Gatling Plugin (07d7069f-3eef-5326-83b9-a1166f0e9e39)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5806 vulnerable 2026-06-08 07:37:25.744078 Details available
Jenkins Gatling Plugin 136.vb_9009b_3d33a_e serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting (XSS) vulnerability exploitable by users able to change report content.
Published: 2025-06-06T13:32:08.219Z
Updated: 2025-06-06T16:03:44.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2173 vulnerable 2026-06-08 05:24:59.036553 Details available
Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports served by the plugin, resulting in an XSS vulnerability exploitable by users able to change report content.
Published: 2020-04-07T12:25:24.000Z
Updated: 2024-08-04T07:01:41.172Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.