CVE-2020-2136

Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored…

published March 9, 2020

CVSS
—
EPSS
1%
Percentile
57.6
In the wild
Unconfirmed
What it is

Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00853 · 57.6th percentile
Published
2020-03-09T15:00Z
EPSS history
Timeline
  • 09 MAR 15:00Z
    Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored…
    cvelistv5