Jenkins
Jenkins Security Advisory 2020-08-12
2020-08-12 Aug 12, 2020 Source: Vendor
Imported by the Jenkins advisory catcher from https://www.jenkins.io/security/advisory/2020-08-12/. 6 SECURITY issues listed. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.jenkins.io/security/advisory/2020-08-12/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
7 lines
Showing 1–7 of 7
CVE-2020-2232
BR2020-0000-014496
SECURITY-1975
unclaimed
SMTP password transmitted and displayed in plain text by Email Extension Plugin
Credited as Bjoern Kasteleiner
CVE-2020-2230
BR2020-0000-014497
SECURITY-1957
unclaimed
Stored XSS vulnerability in project naming strategy
Credited as Pierre Beitz, CloudBees, Inc.
Acknowledgement
BR2020-0000-014498
SECURITY-1794
unclaimed
SECURITY-1794
Credited as Tim Jacomb
CVE-2020-2237
BR2020-0000-014499
SECURITY-1763
unclaimed
CSRF vulnerability in Flaky Test Handler Plugin
Credited as Wadeck Follonier, CloudBees, Inc.
CVE-2020-2236
BR2020-0000-014500
SECURITY-1940
unclaimed
Stored XSS vulnerability in Yet Another Build Visualizer Plugin
Credited as Wadeck Follonier, CloudBees, Inc.
CVE-2020-2229
BR2020-0000-014501
SECURITY-1955
unclaimed
Stored XSS vulnerability in help icons
Credited as Wadeck Follonier, CloudBees, Inc.
CVE-2020-2231
BR2020-0000-014502
SECURITY-1960
unclaimed
Stored XSS vulnerability in 'Trigger builds remotely'
Credited as Wadeck Follonier, CloudBees, Inc.