CVE-2020-2201

Jenkins Sonargraph Integration Plugin 3.0.0 and earlier does not escape the file path for the Log file field form validation, resulting in a stored cross-site…

published July 2, 2020

CVSS
—
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

Jenkins Sonargraph Integration Plugin 3.0.0 and earlier does not escape the file path for the Log file field form validation, resulting in a stored cross-site scripting vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00735 · 53.6th percentile
Published
2020-07-02T14:55Z
EPSS history
Timeline
  • 02 JUL 14:55Z
    Jenkins Sonargraph Integration Plugin 3.0.0 and earlier does not escape the file path for the Log file field form validation, resulting in a stored cross-site…
    cvelistv5