medium5.4
CVE-2020-2194
Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the display name of the builds in the trend chart, resulting in a stored cross-site scripting vu…
Impact
Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the display name of the builds in the trend chart, resulting in a stored cross-site scripting vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Echarts Api | through 4.7.0-3 |