High · 8.8 CVE-2020-2248 EUVD-2022-3010GHSA-7hf3-h28p-q6gx

Reflected XSS vulnerability in Jenkins JSGames Plugin

Published Sep 1, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Description

Jenkins JSGames Plugin 0.2 and earlier evaluates part of a URL as code, resulting in a reflected cross-site scripting (XSS) vulnerability.

Vendor	Product	Affected	Fixed
Jenkins project	Jenkins JSGames Plugin	unspecified – ≤ 0.2	—

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jenkins-ci.plugins:jsgames	<= 0.2	—	GHSA-7hf3-h28p-q6gx