CVE-2020-2244

Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a cross-site scripting (XSS)…

published September 1, 2020

CVSS
—
EPSS
1%
Percentile
54.6
In the wild
Unconfirmed
What it is

Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to provide console output for builds used to test build log indications.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00753 · 54.6th percentile
Published
2020-09-01T13:50Z
EPSS history
Timeline
  • 01 SEP 13:50Z
    Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a cross-site scripting (XSS)…
    cvelistv5