Jenkins Build Failure Analyzer Plugin Cross-site Scripting vulnerability
Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not escape Failure Cause names in build logs.This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or update Failure Causes.Build Failure Analyzer Plugin 2.4.2 escapes Failure Cause names in build logs.