Not rated
CVE-2020-2201 Jenkins Sonargraph Integration Plugin 3.0.0 and earlier does not escape the file path for the Log file field form…
Description
Jenkins Sonargraph Integration Plugin 3.0.0 and earlier does not escape the file path for the Log file field form validation, resulting in a stored cross-site scripting vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Sonargraph Integration Plugin 3.0 | earliest → 3.0.0 | No fix stated |
References
- jenkins.io jenkins.io
- [oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins www.openwall.com
Timeline
- Published
- Last modified