Lucene search
GoogleOSV:GHSA-G4J6-M3M3-CRW8HistoryMay 24, 2022 - 5:23 p.m.
Stored XSS vulnerability in Jenkins upstream cause
2022-05-2417:23:38
Google
osv.dev
8
jenkins
xss
vulnerability
stored
cross-site scripting
EPSS
0.001
Percentile
22.0%
Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the upstream job’s display name shown as part of a build cause, resulting in a stored cross-site scripting vulnerability.
Jenkins 2.245, LTS 2.235.2 escapes the job display name.
Related
osv
osv
BIT-jenkins-2020-2221
2024-03-06 11:05:15
CVE-2020-2221
2020-07-15 18:15:37
alpinelinux
alpinelinux
CVE-2020-2221
2020-07-15 18:15:37
prion
prion
Cross site scripting
2020-07-15 18:15:00
nvd
nvd
CVE-2020-2221
2020-07-15 18:15:37
redhatcve
redhatcve
CVE-2020-2221
2020-07-15 20:43:11
cve
cve
CVE-2020-2221
2020-07-15 18:15:37
github
github
Stored XSS vulnerability in Jenkins upstream cause
2022-05-24 17:23:38
cvelist
cvelist
CVE-2020-2221
2020-07-15 17:00:26
veracode
veracode
Cross-site Scripting (XSS)
2020-08-06 21:31:06
freebsd
freebsd
jenkins -- multiple vulnerabilities
2020-07-15 00:00:00
nessus
nessus
openvas
openvas
Jenkins < 2.245, < 2.235.2 LTS Multiple XSS Vulnerabilities - Linux
2020-07-16 00:00:00
Jenkins < 2.245, < 2.235.2 LTS Multiple XSS Vulnerabilities - Windows
2020-07-16 00:00:00
