CVE-2020-2199
MEDIUM 6.1EPSS 6.2%
Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier does not escape the error message for the repository URL field form validation, resulting in a reflected cross-site scripting vulnerability.
- Affected
- Jenkins project · Jenkins Subversion Partial Release Manager Plugin
- CVSS v3.1 NVD
- 6.1 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - CVSS v3.0 GitHub
- 6.1 MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N - EPSS
- 6.19% chance of exploitation in the next 30 days, 93rd percentile
- Nuclei
- medium
- Published
- 2020-06-03
- Updated
- 2024-08-04
Nuclei templates (1)
Security advisories
- https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1726
- http://www.openwall.com/lists/oss-security/2020/06/03/3
- advisories/GHSA-qmf3-w5jf-cv54