Not rated

CVE-2020-2266 Jenkins Description Column Plugin 1.3 and earlier does not escape the job description in the column tooltip, resulting…

Description

Jenkins Description Column Plugin 1.3 and earlier does not escape the job description in the column tooltip, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Description Column Plugin 1.3	earliest → 1.3	No fix stated

Do you use Jenkins Description Column Plugin?

Track this CVE Watch Jenkins Description Column Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2020-2266

Timeline

Published September 16, 2020
Last modified August 4, 2024

References

www.jenkins.io www.jenkins.io
[oss-security] 20200916 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE