PT-2020-15437 · Cloudbees +1 · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.244 and earlier Jenkins LTS versions 2.235.1 and earlier Description: The issue results from the failure to escape the upstream job's display name shown as part of a build cause, leading to a stored cross-site scripting...