Lucene search
GoogleOSV:GHSA-XG77-XQHQ-CRPRHistoryMay 24, 2022 - 5:07 p.m.
Stored XSS vulnerability in Code Coverage API Plugin
2022-05-2417:07:41
Google
osv.dev
8
stored xss
code coverage
api plugin
vulnerability
cross-site scripting
configuration
software
EPSS
0.001
Percentile
22.0%
Code Coverage API Plugin 1.1.2 and earlier does not escape the filename of the coverage report used in its view.
This results in a stored cross-site scripting vulnerability that can be exploited by users able to change the job configuration.
Code Coverage API Plugin 1.1.3 escapes the filename of the coverage report used in its view.
Related
osv
osv
CVE-2020-2106
2020-01-29 16:15:12
cve
cve
CVE-2020-2106
2020-01-29 16:15:12
prion
prion
Cross site scripting
2020-01-29 16:15:00
cvelist
cvelist
CVE-2020-2106
2020-01-29 15:15:30
nvd
nvd
CVE-2020-2106
2020-01-29 16:15:12
github
github
Stored XSS vulnerability in Code Coverage API Plugin
2022-05-24 17:07:41
nessus
nessus
Jenkins < 2.204.2 LTS / 2.219 Multiple Vulnerabilities
2020-02-06 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2020-01-29 00:00:00