CVE-2020-2175

Jenkins FitNesse Plugin 1.31 and earlier does not correctly escape report contents before showing them on the Jenkins UI, resulting in a stored cross-site…

published April 7, 2020

CVSS
—
EPSS
1%
Percentile
52.8
In the wild
Unconfirmed
What it is

Jenkins FitNesse Plugin 1.31 and earlier does not correctly escape report contents before showing them on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users able to control the XML input files processed by the plugin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00705 · 52.8th percentile
Published
2020-04-07T12:25Z
EPSS history
Timeline
  • 07 APR 12:25Z
    Jenkins FitNesse Plugin 1.31 and earlier does not correctly escape report contents before showing them on the Jenkins UI, resulting in a stored cross-site…
    cvelistv5