CVE-2020-2223

MEDIUM

5.4

CVSS Severity Score

EPSS Score0.1280%

EPSS Percentile32.03th

Published2020年7月15日

Last Modified2024年11月21日

Vulnerability Description

Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape correctly the 'href' attribute of links to downstream jobs displayed in the build console page, resulting in a stored cross-site scripting vulnerability.

Affected Platforms (CPE)

📦

Jenkins

<= 2.235.1

📦

Jenkins

<= 2.244

References & Advisories

🔗 http://www.openwall.com/lists/oss-security/2020/07/15/5

🔗 https://jenkins.io/security/advisory/2020-07-15/#SECURITY-1945

🔗 http://www.openwall.com/lists/oss-security/2020/07/15/5

🔗 https://jenkins.io/security/advisory/2020-07-15/#SECURITY-1945

Vulnerability Description

Affected Platforms (CPE)

Jenkins

Jenkins

References & Advisories

相关漏洞威胁