CVE-2026-48927
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers a…
Published May 27, 2026 · updated Oct 14, 2026 · jenkins buildgraph-view
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views.
Timeline
Detection, updates, and resolution for this record.
May 27, 2026 · NIST NVD
Detected
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views.
Oct 14, 2026 · NIST NVD
Updated
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views.
Affected
- cpe jenkins/buildgraph-viewversion unspecified
Sources
- CVE.orgCVE-2026-48927
Official CVE identifier
cve.org - NIST NVDCVE-2026-48927
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views.
nvd.nist.gov