Most recent entries from all

cnvd-2020-43167

2026-10-03T04:11:28.545797+00:00

cnvd-2020-43167

EUVD-2026-35947

2026-10-03T04:11:28.545837+00:00

EUVD-2026-35947

fkie_cve-2020-2225

2026-10-03T04:11:28.545852+00:00

Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in a stored cross-site scripting vulnerability.

GHSA-w43x-5f8f-686p — Stored XSS vulnerability in multiple axis builds tooltips in Jenkins Matrix Project Plugin

2026-10-03T04:11:28.545879+00:00

Affected: Maven: org.jenkins-ci.plugins:matrix-project

Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes. This results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission.

Matrix Project Plugin 1.17 escapes the axis names shown in these tooltips.

gsd-2020-2225

2026-10-03T04:11:28.545909+00:00

gsd-2020-2225

RHSA-2020:3453 — Red Hat Security Advisory: OpenShift Container Platform 4.5.6 security update

2026-10-03T04:11:28.545922+00:00

jenkins-credentials-binding-plugin: information disclosure in build log when build contains no build steps jenkins-credentials-binding-plugin: improper masking of secrets jenkins-2-plugins/matrix-project: Stored XSS vulnerability in single axis builds tooltips jenkins-2-plugins/matrix-project: Stored XSS vulnerability in multiple axis builds tooltips jenkins-2-plugins/matrix-auth: Stored XSS vulnerability in Matrix Authorization Strategy Plugin python-rsa: decryption of ciphertext leads to DoS