CVE-2020-2140

CVE-2020-2140 affects Jenkins Audit Trail Plugin (versions 3.2 and earlier). The vulnerability is a reflected cross-site scripting due to improper escaping in the URL Patterns field form validation. Exploitation could allow injection of malicious scripts via the error message. The issue is docume...

CVE-2020-2287

CVE-2020-2287 affects the Jenkins Audit Trail Plugin (versions 3.6 and earlier). The vulnerability arises from how the plugin parses URL paths, using a different representation than the Stapler web framework, which can let an attacker craft URLs that bypass request logging for any target URL. The...

CVE-2020-2288

Jenkins Audit Trail Plugin (versions ≤ 3.6) contains a flaw where the default regular expression used to match URLs can be bypassed by appending arbitrary suffixes to requests, causing those requests to be ignored during handling. The issue is addressed in 3.7 and later; upgrading to 3.7+ is reco...