~ / search / GHSA-f82v-pg74-6686

GHSA-f82v-pg74-6686

Reflected XSS vulnerability in Jenkins AWSEB Deployment Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-2174

Packages

EcosystemPackageAffectedFixed in
Maven br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin < 0.3.20 0.3.20

Details

As written in the advisory (Markdown source, shown as plain text).

AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation output. This results in a reflected cross-site scripting (XSS) vulnerability. AWSEB Deployment Plugin 0.3.20 escapes the values printed as part of the affected form validation endpoints.

References

External links from the advisory. They lead to third-party sites.