Junglewise Threat Intelligence

CVE-2020-2227: Stored XSS vulnerability in Jenkins Deployer Framework Plugin

CVE-2020-2227 · Severity: low · CVSS 3.1 · Published 2022-05-24

Technologies: org.jenkins-ci.plugins:deployer-framework (Maven). Vendors: Maven.

Executive brief

Stored XSS vulnerability in Jenkins Deployer Framework Plugin

Affected products

Maven org.jenkins-ci.plugins:deployer-framework

Related threats

Jenkins Deployer Framework Plugin allows attackers with Item/Read permission to read deployment logs
Jenkins Deployer Framework Plugin vulnerable to Path Traversal
Jenkins Deployer Framework Plugin does not restrict application path of applications when configuring a deployment