CVE-2019-10325: Jenkins Warnings Next Generation

Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days.

A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages.

Affected products

• Jenkins Warnings Next Generation: up to and including 5.0.0

Published 2019-05-31. Last modified 2026-06-17.