Skip to content
Sign in
Not rated

CVE-2020-2226 Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration,…

Description

Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration, resulting in a stored cross-site scripting vulnerability.

Affected products and versions

Product Affected versions Fixed in
Jenkins Matrix Authorization Strategy Plugin 2.6 earliest → 2.6.1 No fix stated

Other CVEs of Jenkins Matrix Authorization Strategy Plugin

The 3 CVEs of Jenkins Matrix Authorization Strategy Plugin →
CVE-2026-42521 Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) invokes parameterless… 6.5 Medium CVE-2021-21623 An incorrect permission check in Jenkins Matrix Authorization Strategy Plugin 2.6.5 and earlier allows attackers with… Not rated
Track this CVE