~/products/jenkins_project/jenkins_gitlab_hook_plugin

pipeline liveDigest Docs

Jenkins Project Jenkins Gitlab Hook Plugin vulnerabilities

1 known vulnerability affecting jenkins_project/jenkins_gitlab_hook_plugin.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

1

Severity breakdown

MEDIUM1

Vulnerabilities

SortPage 1 of 1

CVE-2020-2096P1MEDIUMCVSS 6.1ExploitedPoC≥ unspecified, ≤ 1.4.22020-01-15

CVE-2020-2096 [MEDIUM] CWE-79 CVE-2020-2096: Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a reflected XSS vulnerability.

Jenkins Project Jenkins Gitlab Hook Plugin vulnerabilities | cvebase