CVE-2020-2270 – Jenkins ClearCase Release Plugin 0.3 and earlier does not escape the composite baseline in …

16 September 2020

Vuln ID: CVE-2020-2270

Published: 2020-09-16 14:15:14Z

Description: Jenkins ClearCase Release Plugin 0.3 and earlier does not escape the composite baseline in badge tooltip, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

Source: NVD.NIST.GOV

Date:

16 September 2020

Categorie(s):

NVD

Tag(s):

NVD

Sacramento airport goes no-fly after AT&T internet cable snipped19 April 2024
Active adversary report: Ransomware hit a ceiling, but security teams at risk for more pain19 April 2024
Akira takes in $42 million in ransom payments, now targets Linux servers19 April 2024
Forget Boss Battles, RedLine Malware Aims To Defeat Gamers With Fake Cheats19 April 2024
Breakthrough in Quantum Cloud Computing Ensures its Security and Privacy19 April 2024