Junglewise Threat Intelligence

CVE-2020-2226: Stored XSS vulnerability in Jenkins Matrix Authorization Strategy Plugin

CVE-2020-2226 · Severity: low · CVSS 3.1 · Published 2022-05-24

Technologies: org.jenkins-ci.plugins:matrix-auth (Maven). Vendors: Maven.

Executive brief

Stored XSS vulnerability in Jenkins Matrix Authorization Strategy Plugin

Affected products

Maven org.jenkins-ci.plugins:matrix-auth

Related threats

Jenkins Matrix Authorization Strategy Plugin: Unsafe deserialization allows invocation of parameterless constructors
Incorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some items