Red Hat Security Advisory

RHSA-2020:3207

OpenShift Container Platform 4.5.4 jenkins-2-plugins security update

Released 2020-07-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.5 jenkins-2-plugins-4.5.1595405982-1.el7

Fixes 1 record

TI-2020-02067 CVE-2020-2190 · GHSA-q87g-7mp5-765q

Cross-site scripting in Jenkins Script Security Plugin

LOW 26

Jenkins Script Security Plugin 1.72 and earlier does not correctly escape pending or approved classpath entries on the In-process Script Approval page, resulting in a stored cross-site scripting vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00754 Published 2020-06-03 Fixed in 1.73 CWE-79