Lucene search
GoogleOSV:CVE-2020-2264HistorySep 16, 2020 - 2:15 p.m.
CVE-2020-2264
2020-09-1614:15:13
Google
osv.dev
2
Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
| CPE | Name | Operator | Version |
|---|---|---|---|
| custom-job-icon-plugin | eq | custom-job-icon-0.1 | |
| custom-job-icon-plugin | eq | custom-job-icon-0.2 |
Related
cvelist
cvelist
CVE-2020-2264
2020-09-16 13:20:44
github
github
Stored XSS vulnerability in Custom Job Icon Plugin
2022-05-24 17:28:26
osv
osv
Stored XSS vulnerability in Custom Job Icon Plugin
2022-05-24 17:28:26
nvd
nvd
CVE-2020-2264
2020-09-16 14:15:13
cve
cve
CVE-2020-2264
2020-09-16 14:15:13
prion
prion
Cross site scripting
2020-09-16 14:15:00