Lucene search
Veracode Vulnerability DatabaseVERACODE:26160HistoryAug 06, 2020 - 9:33 p.m.
Cross-Site Scripting (XSS)
2020-08-0621:33:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
22.0%
Jenkins is vulnerable to cross-site scripting (XSS). It does not set Content-Security-Policy headers for files uploaded as file parameters to a build, resulting in a stored XSS vulnerability.
Related
osv
osv
Improper Neutralization of Input During Web Page Generation in Jenkins
2022-05-24 17:12:40
BIT-jenkins-2020-2162
2024-03-06 11:05:41
CVE-2020-2162
2020-03-25 17:15:15
github
github
Improper Neutralization of Input During Web Page Generation in Jenkins
2022-05-24 17:12:40
cvelist
cvelist
CVE-2020-2162
2020-03-25 16:05:35
redhatcve
redhatcve
CVE-2020-2162
2021-08-22 13:30:39
prion
prion
Cross site scripting
2020-03-25 17:15:00
alpinelinux
alpinelinux
CVE-2020-2162
2020-03-25 17:15:15
nvd
nvd
CVE-2020-2162
2020-03-25 17:15:15
cve
cve
CVE-2020-2162
2020-03-25 17:15:15
openvas
openvas
Jenkins < 2.228, < 2.204.6 LTS Multiple Vulnerabilities - Windows
2020-03-26 00:00:00
Jenkins < 2.228, < 2.204.6 LTS Multiple Vulnerabilities - Linux
2020-03-26 00:00:00
nessus
nessus
FreeBSD : jenkins -- multiple vulnerabilities (5bf6ed6d-9002-4f43-ad63-458f59e45384)
2020-03-26 00:00:00
Jenkins < (2.204.6 / 2.222.1) LTS / 2.228 Multiple Vulnerabilities
2020-04-02 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2020-03-25 00:00:00