MP
Product
Matrix Project
5
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 4Low 0
Watch
Add Matrix Project to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-20615 | 5.4 | Jan 12 | Jenkins Matrix Project Plugin 1.19 and earlier does not escape HTML metacharacters in node and label names, and label descriptions, resulting in a stored cross-site scripting… Affected: through 1.19 |
| CVE-2020-2225 | 5.4 | Jul 15 | Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in a stored cross-site… Affected: through 1.16 |
| CVE-2020-2224 | 5.4 | Jul 15 | Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a single axis, resulting in a stored cross-site… Affected: through 1.16 |
| CVE-2024-23900 | 4.3 | Jan 24 | Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects, allowing attackers with Item/Configure… Affected: through 822.v01b_8c85d16d2 |
Showing 4