CVE-2020-2206

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Jenkins VncRecorder Plugin 1.25 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Jenkins project	Jenkins VncRecorder Plugin	>= unspecified, <= 1.25

References

http://www.openwall.com/lists/oss-security/2020/07/02/7Mailing List, Third Party Advisory
https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1728%20%282%29Vendor Advisory
http://www.openwall.com/lists/oss-security/2020/07/02/7Mailing List, Third Party Advisory
https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1728%20%282%29Vendor Advisory

Timeline

Published: Jul 2, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-220617.8SUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys. This issue allows attackers to arbitrarily CVE-2020-22076.1Jenkins VncViewer Plugin 1.7 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a refl CVE-2020-220799.8Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attackers to execute arbitr CVE-2020-22084.3Jenkins Slack Upload Plugin 1.7 and earlier stores a secret unencrypted in job config.xml files on the Jenkins master where it can be viewed CVE-2020-220839.8jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode() function. Note: It CVE-2020-22094.3Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it c CVE-2020-22104.3Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier transmits configured passwords in plain text as part of its global Jenkins configura CVE-2020-22118.8Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin 1.3 and earlier does not configure its YAML parser to prevent the instantiation of arbitr CVE-2020-22124.3Jenkins GitHub Coverage Reporter Plugin 1.8 and earlier stores secrets unencrypted in its global configuration file on the Jenkins master wh CVE-2020-221208.8A remote code execution (RCE) vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attackers to execu CVE-2020-221227.5A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database informatio CVE-2020-221247.5A vulnerability in the \inc\config.php component of joyplus-cms v1.6 allows attackers to access sensitive information.