Not rated
CVE-2020-2176 Multiple form validation endpoints in Jenkins useMango Runner Plugin 1.4 and earlier do not escape values received…
Description
Multiple form validation endpoints in Jenkins useMango Runner Plugin 1.4 and earlier do not escape values received from the useMango service, resulting in a cross-site scripting (XSS) vulnerability exploitable by users able to control the values returned from the useMango service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins useMango Runner Plugin 1.4 | earliest → 1.4 | No fix stated |