CVE-2020-2269: XSS
Jenkins chosen-views-tabbar Plugin 1.2 and earlier does not escape view names in the dropdown to select views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with the ability to configure views.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-2269?
CVE-2020-2269 is classified as a medium severity stored cross-site scripting (XSS) vulnerability.
How do I fix CVE-2020-2269?
To fix CVE-2020-2269, upgrade the Jenkins chosen-views-tabbar Plugin to version 1.3 or later.
Who is affected by CVE-2020-2269?
CVE-2020-2269 affects Jenkins users who have chosen-views-tabbar Plugin versions 1.2 and earlier installed.
What is a stored XSS vulnerability in the context of CVE-2020-2269?
In the context of CVE-2020-2269, a stored XSS vulnerability allows attackers to inject malicious scripts that are stored on the server and executed in users' browsers.
Can CVE-2020-2269 be exploited remotely?
Yes, CVE-2020-2269 can be exploited remotely by attackers with the ability to configure views on the affected Jenkins server.