Product · Jenkins Project

Jenkins Code Coverage API Plugin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.4

CVE-2020-2106

Stored XSS vulnerability in Code Coverage API Plugin

Jenkins Code Coverage API Plugin 1.1.2 and earlier does not escape the filename of the coverage report used in its view, resulting in a stored XSS vulnerability exploitable by users able to change job configurations.

Jenkins Project Jenkins Code Coverage API Plugin io.jenkins.plugins:code-coverage-api Web / CMS Maven

Jan 29, 2020