Not rated
CVE-2020-2201 Jenkins Sonargraph Integration Plugin 3.0.0 and earlier does not escape the file path for the Log file field form…
Description
Jenkins Sonargraph Integration Plugin 3.0.0 and earlier does not escape the file path for the Log file field form validation, resulting in a stored cross-site scripting vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Sonargraph Integration Plugin 3.0 | earliest → 3.0.0 | No fix stated |