Jenkins Script Security Plugin 1.72 and earlier does not correctly escape pending or approved classpath entries on the In-process Script Approval page, resulting in a stored cross-site scripting vulnerability.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: jenkins
Published: 2020-06-03T12:40:23
Updated: 2024-08-04T07:01:41.240Z
Reserved: 2019-12-05T00:00:00
Link: CVE-2020-2190
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-06-03T13:15:10.540
Modified: 2024-11-21T05:24:54.657
Link: CVE-2020-2190
Redhat