https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:11:30 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-43167 cnvd-2020-43167 https://cve.radiocsirt.org/vuln/cnvd-2020-43167 https://cve.radiocsirt.org/vuln/euvd-2026-35947 EUVD-2026-35947 https://cve.radiocsirt.org/vuln/euvd-2026-35947 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2225 <p>Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in a stored cross-site scripting vulnerability.</p> <p>Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in a stored cross-site scripting vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-2225 https://cve.radiocsirt.org/vuln/ghsa-w43x-5f8f-686p <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:matrix-project</p> <p>Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes. This results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission.</p> <p>Matrix Project Plugin 1.17 escapes the axis names shown in these tooltips.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:matrix-project</p> <p>Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes. This results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission.</p> <p>Matrix Project Plugin 1.17 escapes the axis names shown in these tooltips.</p> https://cve.radiocsirt.org/vuln/ghsa-w43x-5f8f-686p https://cve.radiocsirt.org/vuln/gsd-2020-2225 gsd-2020-2225 https://cve.radiocsirt.org/vuln/gsd-2020-2225 https://cve.radiocsirt.org/vuln/rhsa-2020:3453 <p>jenkins-credentials-binding-plugin: information disclosure in build log when build contains no build steps jenkins-credentials-binding-plugin: improper masking of secrets jenkins-2-plugins/matrix-project: Stored XSS vulnerability in single axis builds tooltips jenkins-2-plugins/matrix-project: Stored XSS vulnerability in multiple axis builds tooltips jenkins-2-plugins/matrix-auth: Stored XSS vulnerability in Matrix Authorization Strategy Plugin python-rsa: decryption of ciphertext leads to DoS</p> <p>jenkins-credentials-binding-plugin: information disclosure in build log when build contains no build steps jenkins-credentials-binding-plugin: improper masking of secrets jenkins-2-plugins/matrix-project: Stored XSS vulnerability in single axis builds tooltips jenkins-2-plugins/matrix-project: Stored XSS vulnerability in multiple axis builds tooltips jenkins-2-plugins/matrix-auth: Stored XSS vulnerability in Matrix Authorization Strategy Plugin python-rsa: decryption of ciphertext leads to DoS</p> https://cve.radiocsirt.org/vuln/rhsa-2020:3453