| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-2229 | 3.5 |
Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons, resulting in a stored cross-site scripting (XSS) vulnerability.
|
02-11-2023 - 21:41 | 12-08-2020 - 14:15 | |
| CVE-2020-2230 | 3.5 |
Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.
|
02-11-2023 - 21:39 | 12-08-2020 - 14:15 | |
| CVE-2020-2231 | 3.5 |
Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via 'Trigger builds remotely', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure p
|
02-11-2023 - 21:39 | 12-08-2020 - 14:15 | |
| CVE-2020-2220 | 3.5 |
Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resulting in a stored cross-site scripting vulnerability.
|
25-10-2023 - 18:16 | 15-07-2020 - 18:15 | |
| CVE-2020-2222 | 3.5 |
Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the job name in the 'Keep this build forever' badge tooltip, resulting in a stored cross-site scripting vulnerability.
|
25-10-2023 - 18:16 | 15-07-2020 - 18:15 | |
| CVE-2020-2223 | 3.5 |
Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape correctly the 'href' attribute of links to downstream jobs displayed in the build console page, resulting in a stored cross-site scripting vulnerability.
|
25-10-2023 - 18:16 | 15-07-2020 - 18:15 | |
| CVE-2020-2221 | 3.5 |
Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a stored cross-site scripting vulnerability.
|
25-10-2023 - 18:16 | 15-07-2020 - 18:15 | |
| CVE-2020-8557 | 2.1 |
The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file. The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet e
|
27-01-2023 - 20:35 | 23-07-2020 - 17:15 | |
| CVE-2019-17638 | 7.5 |
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to
|
14-06-2021 - 18:15 | 09-07-2020 - 18:15 | |
| CVE-2019-17638 | 7.5 |
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to
|
30-09-2020 - 18:15 | 09-07-2020 - 18:15 |