{"id":"CVE-2020-2224","published":"2020-07-15T17:00:27Z","modified":"2024-08-04T07:01:41Z","title":"Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page…","vendor":"Jenkins","product":"Jenkins Matrix Project Plugin","tier":"tail","description":{"text":"Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a single axis, resulting in a stored cross-site scripting vulnerability.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00916,"percentile":0.60051,"provenance":"source"},"cwes":[],"references":[{"url":"https://jenkins.io/security/advisory/2020-07-15/#SECURITY-1924","tags":["x_refsource_CONFIRM"]},{"url":"http://www.openwall.com/lists/oss-security/2020/07/15/5","tags":["mailing-list","x_refsource_MLIST"]}],"priority":{"score":12.0,"factors":[{"name":"EPSS percentile","points":12.01}]},"vendorSlug":"jenkins","affectedVersions":[{"vendor":"Jenkins project","product":"Jenkins Matrix Project Plugin","versions":[">= unspecified, <= 1.16"]}],"affected":[{"ecosystem":"Maven","package":"org.jenkins-ci.plugins:matrix-project","vulnerableRanges":["<1.17"],"patched":["1.17"],"from":["GHSA-h6qc-455m-7v6v"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-4089","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2019-1003031","published":"2019-03-08","fixed":"1.14","kev":false,"link":{"from":"CVE-2019-1003031","to":"CVE-2020-2224","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.jenkins-ci.plugins:matrix-project","fromFixed":"1.14","toFixed":"1.17","daysApart":495}]}},{"cve":"CVE-2020-2224","published":"2020-07-15","fixed":"1.17","kev":false},{"cve":"CVE-2020-2225","published":"2020-07-15","fixed":"1.17","kev":false},{"cve":"CVE-2022-20615","published":"2022-01-12","fixed":"1.20","kev":false},{"cve":"CVE-2024-23900","published":"2024-01-24","fixed":"822.824.v14451b","kev":false}],"package":"Maven:org.jenkins-ci.plugins:matrix-project"}}