[java-sig-commits] [Bug 1874830] CVE-2020-2229 jenkins: user-specified tooltip values leads to stored cross-site scripting