CVE-2026-92140
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 16, 2026
Vendor
unknown
Description
Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to trigger builds via the Jenkins Gitee Plugin webhook endpoint.