Jenkins project

jenkins_vncrecorder

2 Versions 2 CVEs

Versions

unspecified

OTHER 2 CVEs

1.25

MAJOR_MINOR 2 CVEs

Recent CVEs

CVE-2020-2205

Jenkins VncRecorder Plugin 1.25 and earlier does not escape a tool path in the `checkVncServ` form validation endpoint, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by Jenkins administrators.

UNKNOWN Jul 02, 2020

CVE-2020-2206

Jenkins VncRecorder Plugin 1.25 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site scripting (XSS) vulnerability.

UNKNOWN Jul 02, 2020