CVE-2020-2217

Jenkins Compatibility Action Storage Plugin 1.0 and earlier does not escape the content coming from the MongoDB in the testConnection form validation endpoint…

published July 2, 2020

CVSS
—
EPSS
1%
Percentile
52.6
In the wild
Unconfirmed
What it is

Jenkins Compatibility Action Storage Plugin 1.0 and earlier does not escape the content coming from the MongoDB in the testConnection form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00699 · 52.6th percentile
Published
2020-07-02T14:55Z
EPSS history
Timeline
  • 02 JUL 14:55Z
    Jenkins Compatibility Action Storage Plugin 1.0 and earlier does not escape the content coming from the MongoDB in the testConnection form validation endpoint…
    cvelistv5