Description
Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a "remote cause note."
Remediation
References
Related Vulnerabilities
MySQL CVE-2020-2926 Vulnerability (CVE-2020-2926)
WordPress Plugin Clicky by Yoast Multiple Cross-Site Scripting Vulnerabilities (1.5)
WordPress Plugin Simple Backup Arbitrary File Download (2.7.10)
Piwigo URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-9464)
CakePHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4399)