Search for packages
| purl | pkg:maven/org.jenkins-ci.plugins/matrix-project@1.16 |
| Next non-vulnerable version | 1.17 |
| Latest non-vulnerable version | 822.824.v14451b |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-cnub-whtt-c7ej
Aliases: CVE-2020-2224 GHSA-h6qc-455m-7v6v |
Stored XSS vulnerability in single axis builds tooltips in Jenkins Matrix Project Plugin Matrix Project Plugin 1.16 and earlier does not escape node names shown in tooltips on the overview page of builds with a single axis. This results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Agent/Configure permission. Matrix Project Plugin 1.17 escapes the node names shown in these tooltips. |
Affected by 0 other vulnerabilities. |
|
VCID-js1p-kbgy-6be8
Aliases: CVE-2020-2225 GHSA-w43x-5f8f-686p |
Stored XSS vulnerability in multiple axis builds tooltips in Jenkins Matrix Project Plugin Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes. This results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission. Matrix Project Plugin 1.17 escapes the axis names shown in these tooltips. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-04T14:32:40.528655+00:00 | GHSA Importer | Affected by | VCID-js1p-kbgy-6be8 | https://github.com/advisories/GHSA-w43x-5f8f-686p | 38.1.0 |
| 2026-04-04T14:32:40.400558+00:00 | GHSA Importer | Affected by | VCID-cnub-whtt-c7ej | https://github.com/advisories/GHSA-h6qc-455m-7v6v | 38.1.0 |
| 2026-04-02T12:36:55.494814+00:00 | GitLab Importer | Affected by | VCID-cnub-whtt-c7ej | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.plugins/matrix-project/CVE-2020-2224.yml | 38.0.0 |
| 2026-04-02T12:36:55.305465+00:00 | GitLab Importer | Affected by | VCID-js1p-kbgy-6be8 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.plugins/matrix-project/CVE-2020-2225.yml | 38.0.0 |