-
Type:
Bug
-
Resolution: Unresolved
-
Priority:
Major
-
Component/s: metadata-plugin
-
None
A stored cross-site scripting (XSS) vulnerability in Metadata Plugin allows users with permission to change metadata definitions to insert arbitrary HTML/Javascript into Jenkins pages.