CVE-2025-67641
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Jenkins Coverage Plugin 2.3054.ve1ff7b_a_a_123b_ and earlier does not validate the configured coverage results ID when creating coverage results, only when submitting the job configuration through the UI, allowing attackers with Item/Configure permission to use a `javascript:` scheme URL as identifier by configuring the job through the REST API, resulting in a stored cross-site scripting (XSS) vulnerability.
Risk Assessment
An attacker with Item/Configure permission could inject a malicious script that executes in other users' browsers, potentially leading to session theft or other actions on their behalf.
Recommendation
Update Jenkins Coverage Plugin to a version newer than 2.3054.ve1ff7b_a_a_123b_ and restrict Item/Configure permissions to trusted users.
Other vulnerabilities in Jenkins Coverage Plugin
Original NVD description (English source)
Jenkins Coverage Plugin 2.3054.ve1ff7b_a_a_123b_ and earlier does not validate the configured coverage results ID when creating coverage results, only when submitting the job configuration through the UI, allowing attackers with Item/Configure permission to use a `javascript:` scheme URL as identifier by configuring the job through the REST API, resulting in a stored cross-site scripting (XSS) vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS