Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jenkins-ci.plugins/matrix-project@1.17
purl pkg:maven/org.jenkins-ci.plugins/matrix-project@1.17
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-cnub-whtt-c7ej Stored XSS vulnerability in single axis builds tooltips in Jenkins Matrix Project Plugin Matrix Project Plugin 1.16 and earlier does not escape node names shown in tooltips on the overview page of builds with a single axis. This results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Agent/Configure permission. Matrix Project Plugin 1.17 escapes the node names shown in these tooltips. CVE-2020-2224
GHSA-h6qc-455m-7v6v
VCID-js1p-kbgy-6be8 Stored XSS vulnerability in multiple axis builds tooltips in Jenkins Matrix Project Plugin Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes. This results in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission. Matrix Project Plugin 1.17 escapes the axis names shown in these tooltips. CVE-2020-2225
GHSA-w43x-5f8f-686p

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-04T14:32:40.532212+00:00 GHSA Importer Fixing VCID-js1p-kbgy-6be8 https://github.com/advisories/GHSA-w43x-5f8f-686p 38.1.0
2026-04-04T14:32:40.404166+00:00 GHSA Importer Fixing VCID-cnub-whtt-c7ej https://github.com/advisories/GHSA-h6qc-455m-7v6v 38.1.0
2026-04-02T12:36:55.498460+00:00 GitLab Importer Fixing VCID-cnub-whtt-c7ej https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.plugins/matrix-project/CVE-2020-2224.yml 38.0.0
2026-04-02T12:36:55.309408+00:00 GitLab Importer Fixing VCID-js1p-kbgy-6be8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.plugins/matrix-project/CVE-2020-2225.yml 38.0.0
2026-04-01T13:10:26.654835+00:00 GithubOSV Importer Fixing VCID-cnub-whtt-c7ej https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-h6qc-455m-7v6v/GHSA-h6qc-455m-7v6v.json 38.0.0
2026-04-01T13:07:46.291386+00:00 GithubOSV Importer Fixing VCID-js1p-kbgy-6be8 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-w43x-5f8f-686p/GHSA-w43x-5f8f-686p.json 38.0.0