Jenkins Sauce OnDemand Plugin跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exists in Jenkins Sauce OnDemand Plugin version 1.204 and earlier. The vulnerability stems from the fact that the names and descriptions of the Sauce Labs Browsers parameters are not escaped on the view where the parameters are displayed, and can be exploited by attackers to execute JavaScript code on the client side.