Package · Maven

org.jenkins-ci.plugins:description-column-plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.0

CVE-2020-2266

Stored XSS vulnerability in Description Column Plugin

Jenkins Description Column Plugin 1.3 and earlier does not escape the job description in the column tooltip, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

Jenkins Project Jenkins Description Column Plugin org.jenkins-ci.plugins:description-column-plugin Web / CMS Maven

Sep 16, 2020