Lucene search
GoogleOSV:GHSA-X68X-WVM2-HQC8HistoryMay 24, 2022 - 5:19 p.m.
Stored XSS vulnerability in Jenkins Compact Columns Plugin
2022-05-2417:19:04
Google
osv.dev
7
0.001 Low
EPSS
Percentile
22.2%
Compact Columns Plugin 1.11 and earlier displays the unprocessed job description in tooltips.
This results in a stored cross-site scripting vulnerability that can be exploited by users with Job/Configure permission.
Compact Columns Plugin 1.12 applies the configured markup formatter to the job description shown in tooltips.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.plugins:compact-columns | eq | 1.10 | |
| org.jenkins-ci.plugins:compact-columns | eq | 1.11 |
Related
prion
prion
Cross site scripting
2020-06-03 13:15:00
cvelist
cvelist
CVE-2020-2195
2020-06-03 12:40:25
nvd
nvd
CVE-2020-2195
2020-06-03 13:15:10
github
github
Stored XSS vulnerability in Jenkins Compact Columns Plugin
2022-05-24 17:19:04
cve
cve
CVE-2020-2195
2020-06-03 13:15:10
osv
osv
CVE-2020-2195
2020-06-03 13:15:10