← Back to CVE List
CVE-2020-2225
Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in a stored cross-site scripting vulnerability.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt