CVE-2020-2169

2020-03-2517:15:15

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.3%

JSON

A form validation endpoint in Jenkins Queue cleanup Plugin 1.3 and earlier does not properly escape a query parameter displayed in an error message, resulting in a reflected XSS vulnerability.

CPENameOperatorVersion
queue-cleanup-plugineqqueue-cleanup-1.3
queue-cleanup-plugineqqueue-cleanup-1.0
queue-cleanup-plugineqqueue-cleanup-1.2

Name	Operator	Version
queue-cleanup-plugin	eq	queue-cleanup-1.3
queue-cleanup-plugin	eq	queue-cleanup-1.0
queue-cleanup-plugin	eq	queue-cleanup-1.2

References

www.openwall.com/lists/oss-security/2020/03/25/2

jenkins.io/security/advisory/2020-03-25/#SECURITY-1724