Stored Cross-Site Scripting Vulnerability in Jenkins Sonargraph Integration Plugin

CVE-2020-2201

Summary

The Jenkins Sonargraph Integration Plugin, in versions 3.0.0 and prior, is susceptible to a stored cross-site scripting issue due to inadequate file path validation for the Log file field. This vulnerability allows an attacker to inject malicious scripts that can be executed when the affected log file is accessed, potentially leading to unauthorized access or data compromise. Proper validation and escaping mechanisms are crucial to prevent such vulnerabilities and to maintain the integrity and security of applications.

References