CVE-2025-5806 – Jenkins Gatling Plugin Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-5806

Published : June 6, 2025, 2:15 p.m. | 29 minutes ago

Description : Jenkins Gatling Plugin 136.vb_9009b_3d33a_e serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting (XSS) vulnerability exploitable by users able to change report content.

Severity: 8.0 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…