Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting (XSS) vulnerability.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| com.checkmarx.jenkins:checkmarx(Maven) | 0 | 2022.4.3 | N/A |
CVSS Metrics
