org.jenkins-ci.plugins/cppcheck vulnerabilities

Latest org.jenkins-ci.plugins/cppcheck CVEs

Newest publication first

1. CVE-2023-28678 Jenkins Cppcheck Plugin vulnerable to stored cross-site scripting (XSS)

   Published 2023-03-23

   Medium·CVSS 5.4 EPSS 0.46%

   Jenkins Cppcheck Plugin 1.26 and earlier does not escape file names from Cppcheck report files before showing them on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control report file contents.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.