Skip to main content

Timestamper

1 CVEs product

Monthly

CVE-2020-2137 Maven MEDIUM PATCH This Month

Jenkins Timestamper Plugin 1.11.1 and earlier does not sanitize HTML formatting of its output, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Jenkins Timestamper
NVD
CVSS 3.1
4.8
EPSS
0.7%
EPSS 1% CVSS 4.8
MEDIUM PATCH This Month

Jenkins Timestamper Plugin 1.11.1 and earlier does not sanitize HTML formatting of its output, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Jenkins Timestamper
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy