CVE-2020-2111: XSS
Jenkins Subversion Plugin 2.13.0 and earlier does not escape the error message for the Project Repository Base URL field form validation, resulting in a stored cross-site scripting vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/org.jenkins-ci.plugins:subversionto a version that resolves this vulnerability.Fixed in 2.13.1 - Upgrade
Upgrade
Jenkins Subversion Pluginto a version that resolves this vulnerability.Fixed in 2.13.1
Event History
Frequently Asked Questions
What is the vulnerability ID for this Jenkins Subversion Plugin vulnerability?
The vulnerability ID for this Jenkins Subversion Plugin vulnerability is CVE-2020-2111.
What is the severity of CVE-2020-2111?
CVE-2020-2111 has a severity of medium with a CVSS score of 5.4.
What software versions are affected by CVE-2020-2111?
Jenkins Subversion Plugin version 2.13.0 and earlier are affected by CVE-2020-2111.
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The Common Weakness Enumeration (CWE) ID for this vulnerability is CWE-79.
How do I fix the vulnerability CVE-2020-2111 in Jenkins Subversion Plugin?
To fix the vulnerability CVE-2020-2111 in Jenkins Subversion Plugin, upgrade to a version later than 2.13.0.