Non notée
CVE-2020-2238 Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters'…
Description
Jenkins Git Parameter Plugin 0.9.12 and earlier does not escape the repository field on the 'Build with Parameters' page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins Git Parameter Plugin 0.9 | premières → 0.9.12 | Pas de correctif indiqué |
Références
- jenkins.io jenkins.io
- [oss-security] 20200901 Multiple vulnerabilities in Jenkins plugins www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Jenkins Git Parameter Plugin
Les 6 CVE de Jenkins Git Parameter Plugin →
CVE-2026-57286
A missing permission check in Jenkins Git Parameter Plugin 462.vdcf3df2ed2ca_ and earlier allows attackers with…
4.3
Moyenne
CVE-2025-53652
Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to…
8.2
Élevée
CVE-2022-29040
Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views…
Non notée
CVE-2020-2112
Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the parameter name shown on the UI, resulting in a…
Non notée