Lucene search
GoogleOSV:GHSA-G8PG-QRVM-WGH2HistoryMay 24, 2022 - 5:12 p.m.
Improper Neutralization of Input During Web Page Generation in Jenkins
2022-05-2417:12:40
Google
osv.dev
5
0.001 Low
EPSS
Percentile
22.0%
Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not properly escape node labels that are shown in the form validation for label expressions on job configuration pages, resulting in a stored XSS vulnerability exploitable by users able to define node labels.
Related
prion
prion
Cross site scripting
2020-03-25 17:15:00
nvd
nvd
CVE-2020-2161
2020-03-25 17:15:15
github
github
Improper Neutralization of Input During Web Page Generation in Jenkins
2022-05-24 17:12:40
osv
osv
CVE-2020-2161
2020-03-25 17:15:15
BIT-jenkins-2020-2161
2024-03-06 11:05:51
cvelist
cvelist
CVE-2020-2161
2020-03-25 16:05:34
redhatcve
redhatcve
CVE-2020-2161
2021-06-13 01:04:26
veracode
veracode
Cross-site Scripting (XSS)
2020-08-06 21:33:57
alpinelinux
alpinelinux
CVE-2020-2161
2020-03-25 17:15:15
cve
cve
CVE-2020-2161
2020-03-25 17:15:15
openvas
openvas
Jenkins < 2.228, < 2.204.6 LTS Multiple Vulnerabilities - Windows
2020-03-26 00:00:00
Jenkins < 2.228, < 2.204.6 LTS Multiple Vulnerabilities - Linux
2020-03-26 00:00:00
nessus
nessus
FreeBSD : jenkins -- multiple vulnerabilities (5bf6ed6d-9002-4f43-ad63-458f59e45384)
2020-03-26 00:00:00
Jenkins < (2.204.6 / 2.222.1) LTS / 2.228 Multiple Vulnerabilities
2020-04-02 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2020-03-25 00:00:00