Security Advisory

CVE-2020-2176

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-04-07 12:25:25

Last updated 2024-08-04 07:01:40

Assigner jenkins

CVSS score not scored

State PUBLISHED

Description

Multiple form validation endpoints in Jenkins useMango Runner Plugin 1.4 and earlier do not escape values received from the useMango service, resulting in a cross-site scripting (XSS) vulnerability exploitable by users able to control the values returned from the useMango service.

← Browse all CVEs View on cve.org ↗