CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2020-2152

Jenkins Subversion Release Manager Plugin 1.2 and earlier does not escape the error message for the Repository URL field form validation, resulting in a reflected cross-site scripting vulnerability.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 35.3%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

http://www.openwall.com/lists/oss-security/2020/03/09/1
https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1727
http://www.openwall.com/lists/oss-security/2020/03/09/1
https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1727

Products affected by CVE-2020-2152

Jenkins » Subversion Release Manager » Version: 0.1

cpe:2.3:a:jenkins:subversion_release_manager:0.1
Jenkins » Subversion Release Manager » Version: 0.2

cpe:2.3:a:jenkins:subversion_release_manager:0.2
Jenkins » Subversion Release Manager » Version: 1.1

cpe:2.3:a:jenkins:subversion_release_manager:1.1
Jenkins » Subversion Release Manager » Version: 1.2

cpe:2.3:a:jenkins:subversion_release_manager:1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-2152

Products

Pricing

Contact Us