VYPR

Maven package

org.jenkins-ci.plugins/validating-string-parameter

pkg:maven/org.jenkins-ci.plugins/validating-string-parameter

Vulnerabilities (1)

  • CVE-2020-2257Sep 16, 2020
    affected < 2.5fixed 2.5

    Jenkins Validating String Parameter Plugin 2.4 and earlier does not escape various user-controlled fields, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.