Lucene search

K
osvGoogleOSV:BIT-JENKINS-2020-2230
HistoryMar 06, 2024 - 11:04 a.m.

BIT-jenkins-2020-2230

2024-03-0611:04:36
Google
osv.dev
5
jenkins
cross-site scripting
security vulnerability
software

5.3 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.4%

Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.

CPENameOperatorVersion
jenkinslt2.235.3
jenkinslt2.251.0

5.3 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.4%