Package · Maven

org.jvnet.hudson.plugins:findbugs

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 5.4

CVE-2020-2317

Stored XSS vulnerability in Jenkins FindBugs Plugin

Jenkins FindBugs Plugin 5.0.0 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide report files to Jenkins FindBugs Plugin's post build step.

Jenkins Project Jenkins FindBugs Plugin org.jvnet.hudson.plugins:findbugs Web / CMS Maven

Nov 4, 2020