Skip to content
Not rated

CVE-2020-2195 Jenkins Compact Columns Plugin 1.11 and earlier displays the unprocessed job description in tooltips, resulting in a…

Description

Jenkins Compact Columns Plugin 1.11 and earlier displays the unprocessed job description in tooltips, resulting in a stored cross-site scripting vulnerability that can be exploited by users with Job/Configure permission.

Affected products and versions

Product Affected versions Fixed in
Jenkins Compact Columns Plugin 1.11 earliest → 1.11 No fix stated
Track this CVE