Lucene search
GoogleOSV:GHSA-6XXF-RWV4-MRJMHistoryMay 24, 2022 - 5:10 p.m.
Stored XSS vulnerability in Jenkins Timestamper Plugin
2022-05-2417:10:27
Google
osv.dev
4
jenkins
timestamper plugin
xss
vulnerability
html formatting
console output
cross-site scripting
overall/administer permission
EPSS
0.001
Percentile
22.0%
Timestamper Plugin 1.11.1 and earlier does not escape or sanitize the HTML formatting used to display the timestamps in console output for builds.
This results in a stored cross-site scripting vulnerability that can be exploited by users with Overall/Administer permission.
Timestamper Plugin 1.11.2 sanitizes the HTML formatting for timestamps and only allows basic, safe HTML formatting.
Related
cvelist
cvelist
CVE-2020-2137
2020-03-09 15:00:57
github
github
Stored XSS vulnerability in Jenkins Timestamper Plugin
2022-05-24 17:10:27
cve
cve
CVE-2020-2137
2020-03-09 16:15:12
nvd
nvd
CVE-2020-2137
2020-03-09 16:15:12
prion
prion
Cross site scripting
2020-03-09 16:15:00
osv
osv
CVE-2020-2137
2020-03-09 16:15:12