Lucene search

Stored XSS vulnerability in Jenkins Git Parameter Plugin

🗓️ 24 May 2022 17:06:27Reported by GitHub Advisory DatabaseType

Stored XSS vulnerability in Jenkins Git Parameter Plugin. Git Parameter Plugin 0.9.12 earlier, escapes repository field, stored XSS vulnerability, exploitable by attackers with Job/Configure permission. Git Parameter Plugin 0.9.13 fixed

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2020-2238	1 Sep 202013:50	–	cvelist
OSV	Stored XSS vulnerability in Jenkins Git Parameter Plugin	24 May 202217:27	–	osv
OSV	CVE-2020-2238	1 Sep 202014:15	–	osv
NVD	CVE-2020-2238	1 Sep 202014:15	–	nvd
Prion	Cross site scripting	1 Sep 202014:15	–	prion
CVE	CVE-2020-2238	1 Sep 202014:15	–	cve

Vulners

Node

org.jenkins-ci.tools git-parameterRange≤0.9.12

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-2238
jenkins	www.jenkins.io/security/advisory/2020-09-01/
openwall	www.openwall.com/lists/oss-security/2020/09/01/3
github	www.github.com/jenkinsci/git-parameter-plugin/commit/7014c4dd030ee4226b4795137050743a84d67cb0
github	www.github.com/advisories/GHSA-j7q2-c6r4-x2jw

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 May 2022 17:27Current

4.9Medium risk

Vulners AI Score4.9

EPSS0.001

CWE-79