CVE-2020-2201

Publication date

2020-07-02 14:55:32

Family

jenkins

State

PUBLISHED

Description

Jenkins Sonargraph Integration Plugin 3.0.0 and earlier does not escape the file path for the Log file field form validation, resulting in a stored cross-site scripting vulnerability.