Lucene search
GoogleOSV:GHSA-F4GQ-7HVF-FJM3HistoryMay 24, 2022 - 5:12 p.m.
Stored XSS vulnerability in Jenkins RapidDeploy Plugin
2022-05-2417:12:40
Google
osv.dev
7
jenkins
rapiddeploy plugin
xss
vulnerability
remote server
stored
escaped
EPSS
0.001
Percentile
22.0%
RapidDeploy Plugin 4.2 and earlier does not escape package names in its displayed table of packages obtained from a remote server. This results in a stored cross-site scripting (XSS) vulnerability exploitable by users able to configure jobs.
RapidDeploy Plugin 4.2.1 escapes package names.
Related
cvelist
cvelist
CVE-2020-2170
2020-03-25 16:05:38
alpinelinux
alpinelinux
CVE-2020-2170
2020-03-25 17:15:15
prion
prion
Cross site scripting
2020-03-25 17:15:00
nvd
nvd
CVE-2020-2170
2020-03-25 17:15:15
github
github
Stored XSS vulnerability in Jenkins RapidDeploy Plugin
2022-05-24 17:12:40
cve
cve
CVE-2020-2170
2020-03-25 17:15:15
osv
osv
CVE-2020-2170
2020-03-25 17:15:15