Executive brief
Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name
Affected products
- Maven org.jenkins-ci.plugins:pipeline-maven
Junglewise Threat Intelligence
CVE-2020-2256: Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name
CVE-2020-2256 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:pipeline-maven (Maven). Vendors: Maven.
Related threats
- Improper masking of credentials in Jenkins Pipeline Maven Integration Plugin
- XML External Entity processing vulnerability in Pipeline Maven Integration Jenkins Plugin
- CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
- Missing permission check in Jenkins Pipeline Maven Integration Plugin allows enumerating credentials IDs
- Missing permission check in Jenkins Pipeline Maven Integration Plugin allow capturing credentials