CVE-2020-2220 — Vulnetix

CVE-2020-2220 PUBLISHED

Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resulting in a stored cross-site scripting vulnerability.

EPSS 0.42% · 62.2th percentile

Risk Scores

EPSS Score

0.42%

62.2th percentile

Affected Products

Vendor	Product	Versions
Bitnami	jenkins	0
Bitnami	jenkins	0

Exploit Intelligence

https://jenkins.io/security/advisory/2020-07-15/#SECURITY-1868 (circl)
[oss-security] 20200715 Multiple vulnerabilities in Jenkins and Jenkins plugins (circl)

Timeline

Jul 15, 2020 CVE Published
Jul 21, 2020 CVE Updated
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 24, 2021 EPSS Score
Dec 27, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 28, 2022 EPSS Score
Apr 1, 2022 EPSS Score
May 1, 2022 EPSS Score
Jul 3, 2022 EPSS Score
Nov 6, 2022 EPSS Score

References

http://www.openwall.com/lists/oss-security/2020/07/15/5 url
https://jenkins.io/security/advisory/2020-07-15/#SECURITY-1868 url
https://nvd.nist.gov/vuln/detail/CVE-2020-2220 url

Open in Interactive Console →