CVE-2020-2140
MEDIUM NUCLEIJenkins Audit Trail < 3.2 - XSS
Title source: ruleDescription
Jenkins Audit Trail Plugin 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability.
Nuclei Templates (1)
Jenkin Audit Trail <=3.2 - Cross-Site Scripting
MEDIUMby j3ssie/geraldino2
Scores
CVSS v3
6.1
EPSS
0.4481
EPSS Percentile
97.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (2)
jenkins/audit_trail
< 3.2
org.jenkins-ci.plugins/audit-trail
0 - 3.3Maven
Published
Mar 09, 2020
Tracked Since
Feb 18, 2026