Lucene search
GoogleOSV:GHSA-9JV5-WF44-8VFMHistoryMay 24, 2022 - 5:30 p.m.
Stored XSS vulnerability in Jenkins Active Choices Plugin
2022-05-2417:30:18
Google
osv.dev
4
0.001 Low
EPSS
Percentile
22.2%
Jenkins Active Choices Plugin 2.4 and earlier does not escape the name and description of build parameters.
This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
Active Choices Plugin 2.5 escapes the name of build parameters and applies the configured markup formatter to the description of build parameters.
Related
cve
cve
CVE-2020-2289
2020-10-08 13:15:11
cvelist
cvelist
CVE-2020-2289
2020-10-08 12:40:26
prion
prion
Cross site scripting
2020-10-08 13:15:00
nvd
nvd
CVE-2020-2289
2020-10-08 13:15:11
osv
osv
CVE-2020-2289
2020-10-08 13:15:11
github
github
Stored XSS vulnerability in Jenkins Active Choices Plugin
2022-05-24 17:30:18