CVE-2020-2283

Published: 2020-09-23T14:15Z

Last Modified: 2024-11-21T05:25Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Jenkins Liquibase Runner Plugin 1.4.5 and earlier does not escape changeset contents, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users able to control changeset files evaluated by the plugin. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt