Product · Jenkins Project

Jenkins Release Plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.4

CVE-2020-2292

Stored XSS vulnerability in Jenkins Release Plugin

Jenkins Release Plugin 2.10.2 and earlier does not escape the release version in badge tooltip, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Release/Release permission.

Jenkins Project Jenkins Release Plugin org.jenkins-ci.plugins:release Web / CMS Maven

Oct 8, 2020