CVE-2020-2224

Publication date

2020-07-15 17:00:27

Family

jenkins

State

PUBLISHED

Description

Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a single axis, resulting in a stored cross-site scripting vulnerability.