Aller au contenu
Se connecter
Non notée

CVE-2020-2226 Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration,…

Description

Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration, resulting in a stored cross-site scripting vulnerability.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Matrix Authorization Strategy Plugin 2.6 premières → 2.6.1 Pas de correctif indiqué

Autres CVE de Jenkins Matrix Authorization Strategy Plugin

Les 3 CVE de Jenkins Matrix Authorization Strategy Plugin →
CVE-2026-42521 Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) invokes parameterless… 6.5 Moyenne CVE-2021-21623 An incorrect permission check in Jenkins Matrix Authorization Strategy Plugin 2.6.5 and earlier allows attackers with… Non notée
Suivre cette CVE