com.axis.system.jenkins.plugins.downstream:yet-another-build-visualizer

1 result · Feed

• High 8.0
  CVE-2020-2236

  Stored XSS vulnerability in Jenkins Yet Another Build Visualizer Plugin

  Jenkins Yet Another Build Visualizer Plugin 1.11 and earlier does not escape tooltip content, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Run/Update permission.

  Jenkins Project Jenkins Yet Another Build Visualizer Plugin com.axis.system.jenkins.plugins.downstream:yet-another-build-visualizer Web / CMS Maven
  Aug 12, 2020