CVE-2020-2140: vulnerability in Jenkins Audit Trail Plugin
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
40Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 76%
Jenkins Audit Trail Plugin 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability.
Affected products
Jenkins project · Jenkins Audit Trail PluginRelated CVEs — Jenkins Audit Trail Plugin
In the same product, most dangerous first.