Red Hat Security Advisory: OpenShift Container Platform 4.5.4 jenkins-2-plugins security update

Fixed packages 1

Vulnerabilities 1

• Medium 5.4
  CVE-2020-2190

  Improper Neutralization of Input During Web Page Generation in Jenkins Script Security Plugin

  Jenkins Script Security Plugin 1.72 and earlier does not correctly escape pending or approved classpath entries on the In-process Script Approval page, resulting in a stored cross-site scripting vulnerability.

  Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
  Jun 3, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1847337
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3207.json
• report
  https://access.redhat.com/security/cve/CVE-2020-2190
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-2190
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-2190
• article
  https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1866