Jenkins
Jenkins Security Advisory 2020-04-07
2020-04-07 Apr 7, 2020 Source: Vendor
Imported by the Jenkins advisory catcher from https://www.jenkins.io/security/advisory/2020-04-07/. 5 SECURITY issues listed. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.jenkins.io/security/advisory/2020-04-07/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
5 lines
Showing 1–5 of 5
CVE-2020-2173
BR2020-0000-015348
SECURITY-1633
unclaimed
XSS vulnerability in Gatling Plugin
Credited as Daniel Beck, CloudBees, Inc.
CVE-2020-2172
BR2020-0000-015349
SECURITY-1699
unclaimed
XXE vulnerability in Code Coverage Plugin
Credited as Federico Pellegrin
CVE-2020-2175
BR2020-0000-015350
SECURITY-1801
unclaimed
Stored XSS vulnerability in FitNesse Plugin
Credited as Federico Pellegrin
CVE-2020-2174
BR2020-0000-015351
SECURITY-1769
unclaimed
Reflected XSS vulnerability in AWSEB Deployment Plugin
Credited as Wadeck Follonier, CloudBees, Inc.
CVE-2020-2176
BR2020-0000-015352
SECURITY-1780
unclaimed
XSS vulnerability in useMango Runner Plugin
Credited as Wadeck Follonier, CloudBees, Inc.