QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2020-2257

Back to search

CVE-2020-2257

Published: Sep 16, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

Jenkins Validating String Parameter Plugin 2.4 and earlier does not escape various user-controlled fields, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

VendorProductVersions

Jenkins project

Jenkins Validating String Parameter Plugin

affected
unspecified - <= 2.4

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now