Lucene search
GoogleOSV:CVE-2020-2217HistoryJul 02, 2020 - 3:15 p.m.
CVE-2020-2217
2020-07-0215:15:18
Google
osv.dev
5
Jenkins Compatibility Action Storage Plugin 1.0 and earlier does not escape the content coming from the MongoDB in the testConnection form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| compatibility-action-storage-plugin | eq | compatibility-action-storage-1.0 |
Related
github
github
Reflected XSS in Jenkins Compatibility Action Storage Plugin
2022-05-24 17:22:20
cve
cve
CVE-2020-2217
2020-07-02 15:15:18
prion
prion
Cross site scripting
2020-07-02 15:15:00
nvd
nvd
CVE-2020-2217
2020-07-02 15:15:18
osv
osv
Reflected XSS in Jenkins Compatibility Action Storage Plugin
2022-05-24 17:22:20
cvelist
cvelist
CVE-2020-2217
2020-07-02 14:55:39