Most recent entries from all

cnvd-2020-16690

EUVD-2026-35823

fkie_cve-2020-2136

Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability.

GHSA-6c7r-6p5m-cp82 — Improper Neutralization of Input During Web Page Generation in Jenkins Git Plugin

Affected: Maven: org.jenkins-ci.plugins:git

Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability.

gsd-2020-2136

msrc_CVE-2020-2136 — Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field f…

msrc_CVE-2020-2136

RHSA-2020:2478 — Red Hat Security Advisory: OpenShift Container Platform 3.11 jenkins-2-plugins security update

jenkins-git-client-plugin: OS command injection via 'git ls-remote' jenkins-script-security-plugin: sandbox protection bypass leads to execute arbitrary code in sandboxed scripts jenkins-pipeline-groovy-plugin: sandbox protection bypass through default parameter expressions in CPS-transformed methods jenkins-script-security-plugin: sandbox protection bypass during script compilation phase by applying AST transforming annotations jenkins-subversion-plugin: XSS in project repository base url jenkins-script-security-plugin: sandbox protection bypass via crafted constructor calls and crafted constructor bodies jenkins-script-security-plugin: sandbox protection bypass leads to arbitrary code execution jenkins-git-plugin: stored cross-site scripting