Not rated

CVE-2020-2257 Jenkins Validating String Parameter Plugin 2.4 and earlier does not escape various user-controlled fields, resulting…

Description

Jenkins Validating String Parameter Plugin 2.4 and earlier does not escape various user-controlled fields, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Validating String Parameter Plugin 2.4	earliest → 2.4	No fix stated

Do you use Jenkins Validating String Parameter Plugin?

Track this CVE Watch Jenkins Validating String Parameter Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2020-2257

Timeline

Published September 16, 2020
Last modified August 4, 2024

References

www.jenkins.io www.jenkins.io
[oss-security] 20200916 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE