CVE-2020-2223

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape correctly the 'href' attribute of links to downstream jobs displayed in the build console page, resulting in a stored cross-site scripting vulnerability.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Jenkins project	Jenkins	>= unspecified, <= 2.244; >= unspecified, <= LTS 2.235.1

References

http://www.openwall.com/lists/oss-security/2020/07/15/5Mailing List, Third Party Advisory
https://jenkins.io/security/advisory/2020-07-15/#SECURITY-1945Vendor Advisory
http://www.openwall.com/lists/oss-security/2020/07/15/5Mailing List, Third Party Advisory
https://jenkins.io/security/advisory/2020-07-15/#SECURITY-1945Vendor Advisory

Timeline

Published: Jul 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-22245.4Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a single CVE-2020-222499.8Remote Code Execution vulnerability in phplist 3.5.1. The application does not check any file extensions stored in the plugin zip file, Uplo CVE-2020-22255.4Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple CVE-2020-222514.8Cross Site Scripting (XSS) vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin.CVE-2020-222539.8Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and CVE-2020-22265.4Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration, resulting in a stored CVE-2020-22275.4Jenkins Deployer Framework Plugin 1.2 and earlier does not escape the URL displayed in the build home page, resulting in a stored cross-site CVE-2020-222736.5Neoflex Video Subscription System Version 2.0 is affected by CSRF which allows the Website's Settings to be changed (such as Payment Setting CVE-2020-222749.8JomSocial (Joomla Social Network Extention) 4.7.6 allows CSV injection via a customer's profile.CVE-2020-222758.8Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, whe CVE-2020-222769.8WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry.CVE-2020-222778.0Import and export users and customers WordPress Plugin through 1.15.5.11 allows CSV injection via a customer's profile.