Issues

Site credentials are exposed to any logged in users

XSS on migration details page

XSS on Unknown Job Page

XSS on Unknown Sites page

XSS on Unknown Rules page

RCE in configure jenkins integration project page

Stored XSS at [Export/import] via file name filed

Verify authentication details on site update

Add support for Jenkins Reverse Proxy authentication

Fix Stored XSS - Site Name field

Fined grained ACL permissions for jobs and builds

Use a custom permission for triggering builds