Medium severity5.5NVD Advisory· Published May 27, 2026· Updated Jun 17, 2026
CVE-2026-48927
CVE-2026-48927
Description
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:buildgraph-viewMaven | <= 1.8 | — |
Affected products
2- Range: <=1.8
Patches
Vulnerability mechanics
References
3- github.com/advisories/GHSA-43ph-42gv-7965ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-48927ghsaADVISORY
- www.jenkins.io/security/advisory/2026-05-27/nvdVendor AdvisoryWEB
News mentions
2- Jenkins Security Advisory: 13 CVEs Across 11 Plugins Disclosed May 2026Vypr Intelligence · May 27, 2026
- Jenkins Security Advisory 2026-05-27Jenkins Security Advisories · May 27, 2026