{"id":"CVE-2020-2225","aliases":["EUVD-2022-5490","GHSA-w43x-5f8f-686p","RHSA-2020:3453","RHSA-2020:3541","RHSA-2020:3625","RHSA-2020:4265"],"status":"published","title":"Stored XSS vulnerability in multiple axis builds tooltips in Jenkins Matrix Project Plugin","description":"Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in a stored cross-site scripting vulnerability.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01038,"percentile":0.64179,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2020-07-15T17:00:28Z","modified":"2026-10-24T10:30:23Z","fixes":[{"ecosystem":"Maven","package":"org.jenkins-ci.plugins:matrix-project","fixed_in":["1.17"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:matrix-project","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.16"},{"fixed":"1.17"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:matrix-project","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17"}]}],"versions":["1.0","1.0-beta-1","1.1","1.10","1.11","1.12","1.13","1.14","1.14.1","1.15","1.16","1.2","1.2.1","1.3","1.4","1.4.1","1.5","1.6","1.7","1.7.1","1.8","1.9"]},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.1596698303-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"python2-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.1597310986-1.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.272-1.git.0.79ab6e9.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.272-1.git.0.79ab6e9.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-playbooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.272-1.git.0.79ab6e9.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-roles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.272-1.git.0.79ab6e9.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.272-1.git.0.79ab6e9.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.235.2.1597220898-1.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5-2.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"python2-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5-2.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1598545590-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1601981312-1.el7"}]}],"bundled":5}],"products":[{"vendor":"jenkins","product":"matrix_project"},{"vendor":"jenkins project","product":"jenkins matrix project plugin"}],"references":[{"url":"https://jenkins.io/security/advisory/2020-07-15/#SECURITY-1925","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2020/07/15/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2225","tags":["advisory"]},{"url":"https://github.com/jenkinsci/matrix-project-plugin/commit/b5f22a43147360896442c4a7719446a864898cb4","tags":["web"]},{"url":"https://github.com/advisories/GHSA-w43x-5f8f-686p"},{"url":"https://github.com/jenkinsci/matrix-project-plugin","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3453","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1848507","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857441","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3453.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2181","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847341","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2181","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2181","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1374","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847348","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2182","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2182","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1835","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2224","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2224","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2225","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2225","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2226","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2226","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2226","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-13757","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-13757","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13757","tags":["advisory"]},{"url":"https://github.com/sybrenstuvel/python-rsa/issues/146","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3541","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819663","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857427","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857433","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3541.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16541","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1106","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-1741","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-1741","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1741","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2220","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2220","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2220","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2221","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2221","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2221","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2222","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2222","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2222","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2223","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2223","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2223","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3625","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1861840","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3625.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2190","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2190","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2190","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1866","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4265","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1861842","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4265.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-2225","description":"Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in a stored cross-site scripting vulnerability.","status":"published","published":"2020-07-15T17:00:28Z","modified":"2024-08-04T07:01:41.253Z","updated_at":"2026-11-02T14:35:51.206854Z"}],"euvd":[{"id":"EUVD-2022-5490","description":"Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in a stored cross-site scripting vulnerability.","status":"published","published":"2020-07-15T17:00:28Z","modified":"2024-08-04T07:01:41Z","updated_at":"2026-11-03T03:08:09.929524Z"}],"ghsa":[{"id":"GHSA-w43x-5f8f-686p","title":"Stored XSS vulnerability in multiple axis builds tooltips in Jenkins Matrix Project Plugin","description":"Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes. This results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission.\n\nMatrix Project Plugin 1.17 escapes the axis names shown in these tooltips.","status":"published","published":"2022-05-24T17:23:39Z","modified":"2023-12-21T13:41:53Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:37:27.414424Z"}],"nvd":[{"id":"CVE-2020-2225","description":"Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in a stored cross-site scripting vulnerability.","status":"published","published":"2020-07-15T18:15:37.333Z","modified":"2026-06-17T03:12:01.6Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:06:10.086163Z"}],"osv":[{"id":"CVE-2020-2225","description":"Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in a stored cross-site scripting vulnerability.","status":"published","published":"2020-07-15T18:15:37.333Z","modified":"2026-10-24T10:30:23.790075324Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:15.534837Z"},{"id":"GHSA-w43x-5f8f-686p","title":"Stored XSS vulnerability in multiple axis builds tooltips in Jenkins Matrix Project Plugin","description":"Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes. This results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission.\n\nMatrix Project Plugin 1.17 escapes the axis names shown in these tooltips.","status":"published","published":"2022-05-24T17:23:39Z","modified":"2024-02-16T08:15:32.086134Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:58.04805Z"},{"id":"RHSA-2020:3453","title":"Red Hat Security Advisory: OpenShift Container Platform 4.5.6 security update","status":"published","published":"2024-09-16T04:40:56Z","modified":"2026-06-28T10:38:52Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:3541","title":"Red Hat Security Advisory: OpenShift Container Platform 3.11 security update","status":"published","published":"2024-09-16T04:42:09Z","modified":"2026-08-08T10:01:49Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:3625","title":"Red Hat Security Advisory: OpenShift Container Platform 4.4.20 jenkins-2-plugins security update","status":"published","published":"2024-09-16T04:41:12Z","modified":"2026-06-27T10:11:06Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4265","title":"Red Hat Security Advisory: OpenShift Container Platform 4.3.40 jenkins-2-plugins security update","status":"published","published":"2024-09-16T04:41:21Z","modified":"2026-06-27T10:11:44Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"}]}}