VYPR

Timestamper

by Jenkins Project

CVEs (1)

  • CVE-2020-2137MedMar 9, 2020
    risk 0.24cvss 4.8epss 0.01

    Jenkins Timestamper Plugin 1.11.1 and earlier does not sanitize HTML formatting of its output, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission.