Lucene search
PRIOn knowledge basePRION:CVE-2020-2106HistoryJan 29, 2020 - 4:15 p.m.
Cross site scripting
2020-01-2916:15:00
PRIOn knowledge base
www.prio-n.com
2
Jenkins Code Coverage API Plugin 1.1.2 and earlier does not escape the filename of the coverage report used in its view, resulting in a stored XSS vulnerability exploitable by users able to change job configurations.
| CPE | Name | Operator | Version |
|---|---|---|---|
| code_coverage_api | le | 1.1.2 |
Related
cve
cve
CVE-2020-2106
2020-01-29 16:15:12
osv
osv
CVE-2020-2106
2020-01-29 16:15:12
Stored XSS vulnerability in Code Coverage API Plugin
2022-05-24 17:07:41
github
github
Stored XSS vulnerability in Code Coverage API Plugin
2022-05-24 17:07:41
cvelist
cvelist
CVE-2020-2106
2020-01-29 15:15:30
nvd
nvd
CVE-2020-2106
2020-01-29 16:15:12
nessus
nessus
Jenkins < 2.204.2 LTS / 2.219 Multiple Vulnerabilities
2020-02-06 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2020-01-29 00:00:00