Skip to content
Not rated

CVE-2020-2174 Jenkins AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation…

Description

Jenkins AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation output, resulting in a reflected cross-site scripting vulnerability.

Affected products and versions

Product Affected versions Fixed in
Jenkins AWSEB Deployment Plugin 0.3 earliest → 0.3.19 No fix stated
Track this CVE