https://bugzilla.redhat.com/show_bug.cgi?id=1819222
Bug ID: 1819222
Summary: CVE-2020-2163 jenkins: improperly processes HTML
content of list leads to XSS
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: darunesh(a)redhat.com
CC: abenaiss(a)redhat.com, aos-bugs(a)redhat.com,
bmontgom(a)redhat.com, eparis(a)redhat.com,
extras-orphan(a)fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jburrell(a)redhat.com, jokerman(a)redhat.com,
mizdebsk(a)redhat.com, msrb(a)redhat.com,
nstielau(a)redhat.com, pbhattac(a)redhat.com,
sponnaga(a)redhat.com, vbobade(a)redhat.com
Target Milestone: ---
Classification: Other
A vulnerability was found in Jenkins 2.227 and earlier, LTS 2.204.5 and earlier
improperly processes HTML content of list view column headers, resulting in a
stored XSS vulnerability exploitable by users able to control column headers.
Reference:
https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1796
--
You are receiving this mail because:
You are on the CC list for the bug.