CVE-2020-2222
Fixed in a distro release EPSS 1%
Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the job name in the 'Keep this build forever' badge tooltip, resulting in a stored cross-site scripting vulnerability.
Products: Jenkins project Jenkins
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.jenkins-ci.main:jenkins-core | 2.235.2 |
| Maven | org.jenkins-ci.main:jenkins-core | 2.245 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openshift 3.11 | jenkins | 0:2.235.2.1597220898-1.el7 |
| Red Hat openshift 3.11 | jenkins-2-plugins | 0:3.11.1597310986-1.el7 |
| Red Hat openshift 3.11 | openshift-ansible | 0:3.11.272-1.git.0.79ab6e9.el7 |
| Red Hat openshift 3.11 | openshift-ansible-docs | 0:3.11.272-1.git.0.79ab6e9.el7 |
| Red Hat openshift 3.11 | openshift-ansible-playbooks | 0:3.11.272-1.git.0.79ab6e9.el7 |
| Red Hat openshift 3.11 | openshift-ansible-roles | 0:3.11.272-1.git.0.79ab6e9.el7 |
| Red Hat openshift 3.11 | openshift-ansible-test | 0:3.11.272-1.git.0.79ab6e9.el7 |
| Red Hat openshift 3.11 | python-rsa | 0:4.5-2.el7 |
| Red Hat openshift 3.11 | python2-rsa | 0:4.5-2.el7 |
| Red Hat openshift 4.3 | jenkins | 0:2.235.5.1600415514-1.el7 |
| Red Hat openshift 4.3 | openshift | 0:4.3.37-202009120213.p0.git.0.dffefe4.el8 |
| Red Hat openshift 4.3 | openshift-hyperkube | 0:4.3.37-202009120213.p0.git.0.dffefe4.el8 |
| Red Hat openshift 4.4 | jenkins | 0:2.235.2.1597312065-1.el7 |
| Red Hat openshift 4.4 | openshift | 0:4.4.0-202008250319.p0.git.0.d653415.el7 |
| Red Hat openshift 4.4 | openshift | 0:4.4.0-202008250319.p0.git.0.d653415.el8 |
| Red Hat openshift 4.4 | openshift-hyperkube | 0:4.4.0-202008250319.p0.git.0.d653415.el7 |
| Red Hat openshift 4.4 | openshift-hyperkube | 0:4.4.0-202008250319.p0.git.0.d653415.el8 |
| Red Hat openshift 4.5 | jenkins | 0:2.235.2.1597312414-1.el7 |
| Red Hat openshift 4.5 | openshift | 0:4.5.0-202008130146.p0.git.0.aaf1d57.el8 |
| Red Hat openshift 4.5 | openshift | 0:4.5.0-202008130146.p0.git.0.aaf1d57.el7 |
| Red Hat openshift 4.5 | openshift-hyperkube | 0:4.5.0-202008130146.p0.git.0.aaf1d57.el8 |
| Red Hat openshift 4.5 | openshift-hyperkube | 0:4.5.0-202008130146.p0.git.0.aaf1d57.el7 |