description: Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting (XSS) vulnerability.
affected:
{
vendor: Jenkins Project
product: Jenkins OWASP Dependency-Check Plugin
versions:
version: 0, versionType: maven, lessThanOrEqual: 5.4.5, status: affected
defaultStatus: unaffected
}