Most recent entries from all

cnvd-2020-43165

2026-10-03T09:41:42.479834+00:00

cnvd-2020-43165

EUVD-2026-35904

2026-10-03T09:41:42.479876+00:00

EUVD-2026-35904

fkie_cve-2020-2226

2026-10-03T09:41:42.479891+00:00

Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration, resulting in a stored cross-site scripting vulnerability.

GHSA-vr6v-wjfw-rxcr — Stored XSS vulnerability in Jenkins Matrix Authorization Strategy Plugin

2026-10-03T09:41:42.479922+00:00

Affected: Maven: org.jenkins-ci.plugins:matrix-auth

Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the permission table. This results in a stored cross-site scripting (XSS) vulnerability. When using project-based matrix authorization, this vulnerability can be exploited by a user with Job/Configure or Agent/Configure permission, otherwise by users with Overall/Administer permission.

Matrix Authorization Strategy Plugin 2.6.2 escapes user names in the permission table.

gsd-2020-2226

2026-10-03T09:41:42.479949+00:00

gsd-2020-2226

RHSA-2020:3453 — Red Hat Security Advisory: OpenShift Container Platform 4.5.6 security update

2026-10-03T09:41:42.479961+00:00

jenkins-credentials-binding-plugin: information disclosure in build log when build contains no build steps jenkins-credentials-binding-plugin: improper masking of secrets jenkins-2-plugins/matrix-project: Stored XSS vulnerability in single axis builds tooltips jenkins-2-plugins/matrix-project: Stored XSS vulnerability in multiple axis builds tooltips jenkins-2-plugins/matrix-auth: Stored XSS vulnerability in Matrix Authorization Strategy Plugin python-rsa: decryption of ciphertext leads to DoS