Lucene search
PRIOn knowledge basePRION:CVE-2020-2256HistorySep 16, 2020 - 2:15 p.m.
Cross site scripting
2020-09-1614:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
22.2%
Jenkins Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job’s display name shown as part of a build cause, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pipeline_maven_integration | le | 3.9.2 |
Related
alpinelinux
alpinelinux
CVE-2020-2256
2020-09-16 14:15:13
nvd
nvd
CVE-2020-2256
2020-09-16 14:15:13
cve
cve
CVE-2020-2256
2020-09-16 14:15:13
osv
osv
Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name
2022-05-24 17:28:25
CVE-2020-2256
2020-09-16 14:15:13
cvelist
cvelist
CVE-2020-2256
2020-09-16 13:20:40
github
github