CVE-2020-2217

—

CVSS 3.1

6.1 medium

EPSS

<1%p51

Published

Jul 2, 2020 (Jul 2, 2020)

Modified

Jun 17, 2026

Description

Jenkins Compatibility Action Storage Plugin 1.0 and earlier does not escape the content coming from the MongoDB in the testConnection form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.

Vendors: praqma
Products: compatibility action storage
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.