CVE-2020-2230

PoC —

CVSS 3.1

5.4 medium

EPSS

83%p100

Published

Aug 12, 2020 (Aug 12, 2020)

Modified

Jun 17, 2026

Description

Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.

Vendors: jenkins
Products: jenkins
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (82.7%)

In the news0 stories

No ingested article mentions this CVE yet.