Aller au contenu
Se connecter
Non notée

CVE-2020-2316 Jenkins Static Analysis Utilities Plugin 1.96 and earlier does not escape the annotation message in tooltips,…

Description

Jenkins Static Analysis Utilities Plugin 1.96 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Static Analysis Utilities Plugin 1.96 premières → 1.96 Pas de correctif indiqué

Autres CVE de Jenkins Static Analysis Utilities Plugin

Les 3 CVE de Jenkins Static Analysis Utilities Plugin →
CVE-2019-10307 A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the… Non notée CVE-2019-10308 A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the… Non notée
Suivre cette CVE