Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-2133 State: PUBLISHED Published: 2020-02-12T14:35:50 Last Updated: 2024-08-04T07:01:40.751Z Vendors: Jenkins project Products: Jenkins Applatix Plugin Description: Jenkins Applatix Plugin 1.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1540 - http://www.openwall.com/lists/oss-security/2020/02/12/3
CVE ID: CVE-2020-2134 State: PUBLISHED Published: 2020-03-09T15:00:56 Last Updated: 2024-08-04T07:01:40.721Z Vendors: Jenkins project Products: Jenkins Script Security Plugin Description: Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted constructor calls and crafted constructor bodies. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1754 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2135 State: PUBLISHED Published: 2020-03-09T15:00:56 Last Updated: 2024-08-04T07:01:41.104Z Vendors: Jenkins project Products: Jenkins Script Security Plugin Description: Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted method calls on objects that implement GroovyInterceptable. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1754 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2136 State: PUBLISHED Published: 2020-03-09T15:00:57 Last Updated: 2024-08-04T07:01:40.826Z Vendors: Jenkins project Products: Jenkins Git Plugin Description: Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1723 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2137 State: PUBLISHED Published: 2020-03-09T15:00:57 Last Updated: 2024-08-04T07:01:40.790Z Vendors: Jenkins project Products: Jenkins Timestamper Plugin Description: Jenkins Timestamper Plugin 1.11.1 and earlier does not sanitize HTML formatting of its output, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1784 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2138 State: PUBLISHED Published: 2020-03-09T15:00:57 Last Updated: 2024-08-04T07:01:40.836Z Vendors: Jenkins project Products: Jenkins Cobertura Plugin Description: Jenkins Cobertura Plugin 1.15 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1700 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2139 State: PUBLISHED Published: 2020-03-09T15:00:58 Last Updated: 2024-08-04T07:01:41.043Z Vendors: Jenkins project Products: Jenkins Cobertura Plugin Description: An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1668 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2140 State: PUBLISHED Published: 2020-03-09T15:00:58 Last Updated: 2024-08-04T07:01:41.050Z Vendors: Jenkins project Products: Jenkins Audit Trail Plugin Description: Jenkins Audit Trail Plugin 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1722 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2141 State: PUBLISHED Published: 2020-03-09T15:00:59 Last Updated: 2024-08-04T07:01:41.195Z Vendors: Jenkins project Products: Jenkins P4 Plugin Description: A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1765 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2142 State: PUBLISHED Published: 2020-03-09T15:00:59 Last Updated: 2024-08-04T07:01:40.958Z Vendors: Jenkins project Products: Jenkins P4 Plugin Description: A missing permission check in Jenkins P4 Plugin 1.10.10 and earlier allows attackers with Overall/Read permission to trigger builds. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1765 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2143 State: PUBLISHED Published: 2020-03-09T15:00:59 Last Updated: 2024-08-04T07:01:40.725Z Vendors: Jenkins project Products: Jenkins Logstash Plugin Description: Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1516 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2144 State: PUBLISHED Published: 2020-03-09T15:01:00 Last Updated: 2024-08-04T07:01:40.894Z Vendors: Jenkins project Products: Jenkins Rundeck Plugin Description: Jenkins Rundeck Plugin 3.6.6 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1702 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2145 State: PUBLISHED Published: 2020-03-09T15:01:00 Last Updated: 2024-08-04T07:01:41.239Z Vendors: Jenkins project Products: Jenkins Zephyr Enterprise Test Management Plugin Description: Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores its Zephyr password in plain text on the Jenkins master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1596 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2146 State: PUBLISHED Published: 2020-03-09T15:01:01 Last Updated: 2024-08-04T07:01:41.083Z Vendors: Jenkins project Products: Jenkins Mac Plugin Description: Jenkins Mac Plugin 1.1.0 and earlier does not validate SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1692 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2147 State: PUBLISHED Published: 2020-03-09T15:01:01 Last Updated: 2024-08-04T07:01:41.097Z Vendors: Jenkins project Products: Jenkins Mac Plugin Description: A cross-site request forgery vulnerability in Jenkins Mac Plugin 1.1.0 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1761 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2148 State: PUBLISHED Published: 2020-03-09T15:01:02 Last Updated: 2024-08-04T07:01:40.943Z Vendors: Jenkins project Products: Jenkins Mac Plugin Description: A missing permission check in Jenkins Mac Plugin 1.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1761 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2149 State: PUBLISHED Published: 2020-03-09T15:01:02 Last Updated: 2024-08-04T07:01:40.631Z Vendors: Jenkins project Products: Jenkins Repository Connector Plugin Description: Jenkins Repository Connector Plugin 1.2.6 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1520 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2150 State: PUBLISHED Published: 2020-03-09T15:01:02 Last Updated: 2024-08-04T07:01:40.842Z Vendors: Jenkins project Products: Jenkins Sonar Quality Gates Plugin Description: Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1523 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2151 State: PUBLISHED Published: 2020-03-09T15:01:03 Last Updated: 2024-08-04T07:01:40.723Z Vendors: Jenkins project Products: Jenkins Quality Gates Plugin Description: Jenkins Quality Gates Plugin 2.5 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1519 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2152 State: PUBLISHED Published: 2020-03-09T15:01:03 Last Updated: 2024-08-04T07:01:40.874Z Vendors: Jenkins project Products: Jenkins Subversion Release Manager Plugin Description: Jenkins Subversion Release Manager Plugin 1.2 and earlier does not escape the error message for the Repository URL field form validation, resulting in a reflected cross-site scripting vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1727 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2153 State: PUBLISHED Published: 2020-03-09T15:01:04 Last Updated: 2024-08-04T07:01:40.686Z Vendors: Jenkins project Products: Jenkins Backlog Plugin Description: Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1510 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2154 State: PUBLISHED Published: 2020-03-09T15:01:04 Last Updated: 2024-08-04T07:01:40.703Z Vendors: Jenkins project Products: Jenkins Zephyr for JIRA Test Management Plugin Description: Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1550 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2155 State: PUBLISHED Published: 2020-03-09T15:01:05 Last Updated: 2024-08-04T07:01:41.111Z Vendors: Jenkins project Products: Jenkins OpenShift Deployer Plugin Description: Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1518 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2156 State: PUBLISHED Published: 2020-03-09T15:01:05 Last Updated: 2024-08-04T07:01:40.730Z Vendors: Jenkins project Products: Jenkins DeployHub Plugin Description: Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1511 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2157 State: PUBLISHED Published: 2020-03-09T15:01:05 Last Updated: 2024-08-04T07:01:41.117Z Vendors: Jenkins project Products: Jenkins Skytap Cloud CI Plugin Description: Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1522 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2158 State: PUBLISHED Published: 2020-03-09T15:01:06 Last Updated: 2024-08-04T07:01:41.206Z Vendors: Jenkins project Products: Jenkins Literate Plugin Description: Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1750 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2159 State: PUBLISHED Published: 2020-03-09T15:01:06 Last Updated: 2024-08-04T07:01:40.936Z Vendors: Jenkins project Products: Jenkins CryptoMove Plugin Description: Jenkins CryptoMove Plugin 0.1.33 and earlier allows attackers with Job/Configure access to execute arbitrary OS commands on the Jenkins master as the OS user account running Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1635 - http://www.openwall.com/lists/oss-security/2020/03/09/1
CVE ID: CVE-2020-2160 State: PUBLISHED Published: 2020-03-25T16:05:34 Last Updated: 2024-08-04T07:01:40.917Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.227 and earlier, LTS 2.204.5 and earlier uses different representations of request URL paths, which allows attackers to craft URLs that allow bypassing CSRF protection of any target URL. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1774 - http://www.openwall.com/lists/oss-security/2020/03/25/2
CVE ID: CVE-2020-2161 State: PUBLISHED Published: 2020-03-25T16:05:34 Last Updated: 2024-08-04T07:01:40.978Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not properly escape node labels that are shown in the form validation for label expressions on job configuration pages, resulting in a stored XSS vulnerability exploitable by users able to define node labels. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1781 - http://www.openwall.com/lists/oss-security/2020/03/25/2
CVE ID: CVE-2020-2162 State: PUBLISHED Published: 2020-03-25T16:05:35 Last Updated: 2024-08-04T07:01:40.698Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not set Content-Security-Policy headers for files uploaded as file parameters to a build, resulting in a stored XSS vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1793 - http://www.openwall.com/lists/oss-security/2020/03/25/2
CVE ID: CVE-2020-2163 State: PUBLISHED Published: 2020-03-25T16:05:35 Last Updated: 2024-08-04T07:01:40.841Z Vendors: Jenkins project Products: Jenkins Description: Jenkins 2.227 and earlier, LTS 2.204.5 and earlier improperly processes HTML content of list view column headers, resulting in a stored XSS vulnerability exploitable by users able to control column headers. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1796 - http://www.openwall.com/lists/oss-security/2020/03/25/2
CVE ID: CVE-2020-2164 State: PUBLISHED Published: 2020-03-25T16:05:36 Last Updated: 2024-08-04T07:01:40.700Z Vendors: Jenkins project Products: Jenkins Artifactory Plugin Description: Jenkins Artifactory Plugin 3.5.0 and earlier stores its Artifactory server password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1542%20%281%29 - http://www.openwall.com/lists/oss-security/2020/03/25/2
CVE ID: CVE-2020-2165 State: PUBLISHED Published: 2020-03-25T16:05:36 Last Updated: 2024-08-04T07:01:40.975Z Vendors: Jenkins project Products: Jenkins Artifactory Plugin Description: Jenkins Artifactory Plugin 3.6.0 and earlier transmits configured passwords in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1542%20%282%29 - http://www.openwall.com/lists/oss-security/2020/03/25/2
CVE ID: CVE-2020-2166 State: PUBLISHED Published: 2020-03-25T16:05:37 Last Updated: 2024-08-04T07:01:40.876Z Vendors: Jenkins project Products: Jenkins Pipeline: AWS Steps Plugin Description: Jenkins Pipeline: AWS Steps Plugin 1.40 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1741 - http://www.openwall.com/lists/oss-security/2020/03/25/2
CVE ID: CVE-2020-2167 State: PUBLISHED Published: 2020-03-25T16:05:37 Last Updated: 2024-08-04T07:01:41.184Z Vendors: Jenkins project Products: Jenkins OpenShift Pipeline Plugin Description: Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1739 - http://www.openwall.com/lists/oss-security/2020/03/25/2
CVE ID: CVE-2020-2168 State: PUBLISHED Published: 2020-03-25T16:05:37 Last Updated: 2024-08-04T07:01:41.108Z Vendors: Jenkins project Products: Jenkins Azure Container Service Plugin Description: Jenkins Azure Container Service Plugin 1.0.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1732 - http://www.openwall.com/lists/oss-security/2020/03/25/2
CVE ID: CVE-2020-2169 State: PUBLISHED Published: 2020-03-25T16:05:38 Last Updated: 2024-08-04T07:01:40.793Z Vendors: Jenkins project Products: Jenkins Queue cleanup Plugin Description: A form validation endpoint in Jenkins Queue cleanup Plugin 1.3 and earlier does not properly escape a query parameter displayed in an error message, resulting in a reflected XSS vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1724 - http://www.openwall.com/lists/oss-security/2020/03/25/2
CVE ID: CVE-2020-2170 State: PUBLISHED Published: 2020-03-25T16:05:38 Last Updated: 2024-08-04T07:01:40.875Z Vendors: Jenkins project Products: Jenkins RapidDeploy Plugin Description: Jenkins RapidDeploy Plugin 4.2 and earlier does not escape package names in the table of packages obtained from a remote server, resulting in a stored XSS vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1676 - http://www.openwall.com/lists/oss-security/2020/03/25/2
CVE ID: CVE-2020-2171 State: PUBLISHED Published: 2020-03-25T16:05:39 Last Updated: 2024-08-04T07:01:40.667Z Vendors: Jenkins project Products: Jenkins RapidDeploy Plugin Description: Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1677 - http://www.openwall.com/lists/oss-security/2020/03/25/2
CVE ID: CVE-2020-2172 State: PUBLISHED Published: 2020-04-07T12:25:23 Last Updated: 2024-08-04T07:01:41.007Z Vendors: Jenkins project Products: Jenkins Code Coverage API Plugin Description: Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-04-07/#SECURITY-1699 - http://www.openwall.com/lists/oss-security/2020/04/07/3
CVE ID: CVE-2020-2173 State: PUBLISHED Published: 2020-04-07T12:25:24 Last Updated: 2024-08-04T07:01:41.172Z Vendors: Jenkins project Products: Jenkins Gatling Plugin Description: Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports served by the plugin, resulting in an XSS vulnerability exploitable by users able to change report content. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-04-07/#SECURITY-1633 - http://www.openwall.com/lists/oss-security/2020/04/07/3
CVE ID: CVE-2020-2174 State: PUBLISHED Published: 2020-04-07T12:25:24 Last Updated: 2024-08-04T07:01:41.282Z Vendors: Jenkins project Products: Jenkins AWSEB Deployment Plugin Description: Jenkins AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation output, resulting in a reflected cross-site scripting vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-04-07/#SECURITY-1769 - http://www.openwall.com/lists/oss-security/2020/04/07/3
CVE ID: CVE-2020-2175 State: PUBLISHED Published: 2020-04-07T12:25:25 Last Updated: 2024-08-04T07:01:40.662Z Vendors: Jenkins project Products: Jenkins FitNesse Plugin Description: Jenkins FitNesse Plugin 1.31 and earlier does not correctly escape report contents before showing them on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users able to control the XML input files processed by the plugin. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-04-07/#SECURITY-1801 - http://www.openwall.com/lists/oss-security/2020/04/07/3
CVE ID: CVE-2020-2176 State: PUBLISHED Published: 2020-04-07T12:25:25 Last Updated: 2024-08-04T07:01:40.800Z Vendors: Jenkins project Products: Jenkins useMango Runner Plugin Description: Multiple form validation endpoints in Jenkins useMango Runner Plugin 1.4 and earlier do not escape values received from the useMango service, resulting in a cross-site scripting (XSS) vulnerability exploitable by users able to control the values returned from the useMango service. Additional Analyst Notes: - CVE Program Container: References: - https://jenkins.io/security/advisory/2020-04-07/#SECURITY-1780 - http://www.openwall.com/lists/oss-security/2020/04/07/3