| Max CVSS | 7.5 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-2229 | 3.5 |
Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons, resulting in a stored cross-site scripting (XSS) vulnerability.
|
02-11-2023 - 21:41 | 12-08-2020 - 14:15 | |
| CVE-2020-2230 | 3.5 |
Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.
|
02-11-2023 - 21:39 | 12-08-2020 - 14:15 | |
| CVE-2020-2231 | 3.5 |
Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via 'Trigger builds remotely', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure p
|
02-11-2023 - 21:39 | 12-08-2020 - 14:15 | |
| CVE-2019-17638 | 7.5 |
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to
|
14-06-2021 - 18:15 | 09-07-2020 - 18:15 | |
| CVE-2019-17638 | 7.5 |
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to
|
30-09-2020 - 18:15 | 09-07-2020 - 18:15 |