CVE-2020-2175
1 advisory.
Maven/org.jenkins-ci.plugins:fitnesse CVE-2020-2175: medium 5.4
Stored XSS vulnerability in Jenkins FitNesse Plugin
Action: Upgrade org.jenkins-ci.plugins:fitnesse to 1.32 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.32 | - |
Fixed versions
| 1.32 |
Sources
- osv: GHSA-f6vx-3fq6-hxm8
- https://nvd.nist.gov/vuln/detail/CVE-2020-2175
- https://github.com/jenkinsci/fitnesse-plugin/commit/309d40212338ad6e388f61892e4386f6645438a9
- https://github.com/jenkinsci/fitnesse-plugin/commit/a49167115cc0a3dfca1c139c2c277a7c5c06074d
- https://github.com/jenkinsci/fitnesse-plugin/commit/db72cc49b5cb8a33359805a86a841851673def2d
- https://github.com/jenkinsci/fitnesse-plugin
- https://jenkins.io/security/advisory/2020-04-07/#SECURITY-1801
- http://www.openwall.com/lists/oss-security/2020/04/07/3
CVE-2020-2175 · published · modified · JSON