Reflected XSS vulnerability in Jenkins AWSEB Deployment Plugin

보통 6.1CVE-2020-2174 · GHSA-f82v-pg74-6686 · Published 07/04/2020 · updated 17/06/2026

요약

CVE-2020-2174은(는) br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin, awseb deployment (jenkins)에 영향을 주는 보통 (CVSS 6.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.82%, 전체 취약점의 57.2%보다 높음.
조치: 0.3.20 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin Maven	`< 0.3.20`	`0.3.20`
awseb deployment jenkins	`≤ 0.3.19`	No fix yet

Description

AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation output.

This results in a reflected cross-site scripting (XSS) vulnerability.

AWSEB Deployment Plugin 0.3.20 escapes the values printed as part of the affected form validation endpoints.

NVD description

Jenkins AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation output, resulting in a reflected cross-site scripting vulnerability.

References

nvd.nist.gov/vuln/detail/CVE-2020-2174 · ADVISORY
jenkinsci/awseb-deployment-plugin · PACKAGE
jenkins.io/security/advisory/2020-04-07 · WEB
openwall.com/lists/oss-security/2020/04/07/3 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free