CVE-2019-10432: Jenkins Html Publisher

Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days.

Jenkins HTML Publisher Plugin 1.20 and earlier did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those.

Affected products

• Jenkins Html Publisher: up to and including 1.20

Published 2019-10-01. Last modified 2026-06-17.