Jenkins Project Jenkins global-build-stats Plugin

• CVE-2025-58459 Medium 4.3 Jenkins global-build-stats Plugin 322.v22f4db_18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs. 0.3%
• CVE-2022-27207 Unrated Jenkins global-build-stats Plugin 1.5 and earlier does not escape multiple fields in the chart configuration on the 'Global Build Stats' page, resulting in a stored cross-site scripting (XSS) vulnerab 0.8%