Reflected XSS vulnerability in Jenkins AWSEB Deployment Plugin

AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation output. This results in a reflected cross-site scripting XSS vulnerability. AWSEB Deployment Plugin 0.3.20 escapes the values printed as part of the affected form validation endpoints...

CloudBees Jenkins AWSEB Deployment Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site scripting...

CVE-2020-2174

Jenkins AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation output, resulting in a reflected cross-site scripting vulnerability...

CVE-2020-2174

Summary (CVE-2020-2174, Jenkins AWSEB Deployment Plugin): Versions 0.3.19 and earlier are vulnerable to a reflected XSS due to input values used in form validation output not being escaped. This is achieved via unescaped user-supplied data reflected in the browser, enabling script execution in a ...