GHSA-qg66-xv7v-m834
GitHub Security Advisory
Stored XSS vulnerability in computer-queue-plugin Plugin
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
computer-queue-plugin Plugin 1.5 and earlier does not escape the agent name in tooltips.
This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.
computer-queue-plugin Plugin 1.6 escapes the agent name in tooltips.
Affected Packages
Maven
jenkins.ci.plugins.computerqueue:computer-queue-plugin
Affected versions:
0
(fixed in 1.6)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: August 25, 2025 6:33 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.