CVE-2020-2227

CWE-79 — Cross-site Scripting (XSS)5 documents5 sources
Severity
5.4MEDIUM
EPSS
0.1%
top 68.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Jenkins Project Jenkins Deployer Framework PluginJenkins Deployer Framework
Timeline
PublishedJul 15
Latest updateMay 24

Description

Jenkins Deployer Framework Plugin 1.2 and earlier does not escape the URL displayed in the build home page, resulting in a stored cross-site scripting vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages3 packages

🔴Vulnerability Details

3
GHSA
Stored XSS vulnerability in Jenkins Deployer Framework Plugin↗2022-05-24
▶
OSV
Stored XSS vulnerability in Jenkins Deployer Framework Plugin↗2022-05-24
▶
CVEList
CVE-2020-2227: Jenkins Deployer Framework Plugin 1↗2020-07-15
▶

📋Vendor Advisories

1
Jenkins
Jenkins Security Advisory 2020-07-15↗2020-07-15
▶
CVE-2020-2227 (MEDIUM CVSS 5.4) | Jenkins Deployer Framework Plugin 1 | cvebase.io