CVE-2020-2176

Multiple form validation endpoints in Jenkins useMango Runner Plugin 1.4 and earlier do not escape values received from the useMango service, resulting in a…

published April 7, 2020

CVSS
—
EPSS
1%
Percentile
52.8
In the wild
Unconfirmed
What it is

Multiple form validation endpoints in Jenkins useMango Runner Plugin 1.4 and earlier do not escape values received from the useMango service, resulting in a cross-site scripting (XSS) vulnerability exploitable by users able to control the values returned from the useMango service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00705 · 52.8th percentile
Published
2020-04-07T12:25Z
EPSS history
Timeline
  • 07 APR 12:25Z
    Multiple form validation endpoints in Jenkins useMango Runner Plugin 1.4 and earlier do not escape values received from the useMango service, resulting in a…
    cvelistv5