XSS vulnerability in Jenkins Audit Trail Plugin

보통 6.1CVE-2020-2140 · GHSA-cj2g-wwfv-mvjh · Published 09/03/2020 · updated 17/06/2026

요약

CVE-2020-2140은(는) org.jenkins-ci.plugins:audit-trail, audit trail (jenkins)에 영향을 주는 보통 (CVSS 6.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 76.0%, 전체 취약점의 99.5%보다 높음.
조치: 3.3 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:audit-trail Maven	`< 3.3`	`3.3`
audit trail jenkins	`≤ 3.2`	No fix yet

Description

Jenkins Audit Trail Plugin 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability. Audit Trail Plugin 3.3 escapes the affected part of the error message.

NVD description

Jenkins Audit Trail Plugin 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability.

References

nvd.nist.gov/vuln/detail/CVE-2020-2140 · ADVISORY
jenkinsci/audit-trail-plugin commit 40c6d62 · WEB
jenkinsci/audit-trail-plugin · PACKAGE
jenkins.io/security/advisory/2020-03-09 · WEB
openwall.com/lists/oss-security/2020/03/09/1 · WEB

org.jenkins-ci.plugins:audit-trail의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.jenkins-ci.plugins:audit-trail

Maven

< 3.3

3.3

audit trail

jenkins

≤ 3.2

No fix yet

Description

NVD description

Jenkins Audit Trail Plugin 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability.

org.jenkins-ci.plugins:audit-trail의 다른 취약점

모두 보기 →