gitlab/maven/org.jenkins-ci.ruby-plugins/gitlab-hook/CVE-2020-2096
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a reflected XSS vulnerability.