What is GHSA-73wp-48jc-x2g4?

GHSA-73wp-48jc-x2g4 is a security advisory published by GitHub Security Advisories with Medium severity. Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link...

Which CVE IDs does GHSA-73wp-48jc-x2g4 cover?

GHSA-73wp-48jc-x2g4 covers the following CVE IDs: CVE-2026-117621. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-73wp-48jc-x2g4?

GHSA-73wp-48jc-x2g4 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

GHSA-73wp-48jc-x2g4MediumCVSS 6.1

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link...

Vendor

GitHub Security Advisories

Published

October 28, 2026

Last Modified

November 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-117621 →

📋 Description

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown in the workspace browser for each file and directory, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers in control of agent processes.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-117621
https://www.jenkins.io/security/advisory/2026-10-28/#SECURITY-4232
https://github.com/advisories/GHSA-73wp-48jc-x2g4