CVE-2026-92140 in Gitee Plugin
الملخص
بحسب MITRE • 17/09/2026
Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to trigger builds via the Jenkins Gitee Plugin webhook endpoint.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.