Not rated

CVE-2020-2263 Jenkins Radiator View Plugin 1.29 and earlier does not escape the full name of the jobs in tooltips, resulting in a…

Description

Jenkins Radiator View Plugin 1.29 and earlier does not escape the full name of the jobs in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Radiator View Plugin 1.29	earliest → 1.29	No fix stated

Do you use Jenkins Radiator View Plugin?

Track this CVE Watch Jenkins Radiator View Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2020-2263

Timeline

Published September 16, 2020
Last modified August 4, 2024

References

www.jenkins.io www.jenkins.io
[oss-security] 20200916 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE