vulnerability

Red Hat OpenShift: CVE-2020-2136: jenkins-git-plugin: stored cross-site scripting

Name: Red Hat OpenShift: CVE-2020-2136: jenkins-git-plugin: stored cross-site scripting
Creator: Red Hat
Published: 2020-03-09T00:00:00.000Z
Keywords: CVE, CWE-79, Red Hat OpenShift, 2020, 2136, jenkins, linuxrpm-upgrade-jenkins-2-plugins, Severity 4

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:S/C:N/I:P/A:N)

Published

Mar 9, 2020

Added

Dec 29, 2020

Modified

Mar 30, 2026

Description

Jenkins Git Plugin 4.2.0 and earlier does not escape the error message for the repository URL for Microsoft TFS field form validation, resulting in a stored cross-site scripting vulnerability.

Solution

linuxrpm-upgrade-jenkins-2-plugins

References

CVE-2020-2136
https://attackerkb.com/topics/CVE-2020-2136
CWE-79
EUVD-EUVD-2022-2769
REDHAT-RHSA-2020:2478
REDHAT-RHSA-2020:2737
REDHAT-RHSA-2020:3616
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-2769

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report