CVE-2020-2290

Jenkins Active Choices Plugin 2.4 and earlier does not escape some return values of sandboxed scripts for Reactive Reference Parameters, resulting in a stored…

published October 8, 2020

CVSS
—
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

Jenkins Active Choices Plugin 2.4 and earlier does not escape some return values of sandboxed scripts for Reactive Reference Parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00903 · 59.4th percentile
Published
2020-10-08T12:40Z
EPSS history
Timeline
  • 08 OCT 12:40Z
    Jenkins Active Choices Plugin 2.4 and earlier does not escape some return values of sandboxed scripts for Reactive Reference Parameters, resulting in a stored…
    cvelistv5