Not rated
CVE-2020-2122 Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them,…
Description
Jenkins Brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability exploitable by users able to control the Brakeman post-build step input data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Brakeman Plugin 0.12 | earliest → 0.12 | No fix stated |