Lucene search
GoogleOSV:GHSA-WRWQ-4F2H-QXJ8HistoryMay 24, 2022 - 5:28 p.m.
Stored XSS vulnerability in Custom Job Icon Plugin
2022-05-2417:28:26
Google
osv.dev
6
0.001 Low
EPSS
Percentile
22.2%
Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.plugins:custom-job-icon | eq | 0.2 | |
| org.jenkins-ci.plugins:custom-job-icon | eq | 0.1 |
Related
cvelist
cvelist
CVE-2020-2264
2020-09-16 13:20:44
github
github
Stored XSS vulnerability in Custom Job Icon Plugin
2022-05-24 17:28:26
cve
cve
CVE-2020-2264
2020-09-16 14:15:13
nvd
nvd
CVE-2020-2264
2020-09-16 14:15:13
prion
prion
Cross site scripting
2020-09-16 14:15:00
osv
osv
CVE-2020-2264
2020-09-16 14:15:13