QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2020-2263

Back to search

CVE-2020-2263

Published: Sep 16, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

Jenkins Radiator View Plugin 1.29 and earlier does not escape the full name of the jobs in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

VendorProductVersions

Jenkins project

Jenkins Radiator View Plugin

affected
unspecified - <= 1.29
unknown
next of 1.29 - < unspecified

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now