En resumen
- CVE-2020-2292 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a org.jenkins-ci.plugins:release, release (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.73%, mayor que el 54.6% de las vulnerabilidades.
- Solución: actualizar a 2.11 o posterior.
Description
Jenkins Release Plugin 2.10.2 and earlier does not escape the release version in badge tooltip, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Release/Release permission.
NVD description
Jenkins Release Plugin 2.10.2 and earlier does not escape the release version in badge tooltip, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Release/Release permission.
Más vulnerabilidades de org.jenkins-ci.plugins:release
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free