CVE-2026-92140
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to trigger builds via the Jenkins Gitee Plugin webhook endpoint.
| Vendor | jenkins project |
| Product | jenkins gitee plugin |
| Published | Sep 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for jenkins project jenkins gitee plugin
Be the first to know when new unknown vulnerabilities affecting jenkins project jenkins gitee plugin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Jenkins Project / Jenkins Gitee Plugin
0 ≤ 1301.v8957053c7902