CVE-2020-2225

Publication date

2020-07-15 17:00:28

Family

jenkins

State

PUBLISHED

Description

Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in a stored cross-site scripting vulnerability.