Jenkins Vncrecorder
2 CVEs affecting Jenkins Vncrecorder. Latest disclosed: 2020-07-02. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-2206 | Medium | 6.1 | 2020-07-02 | Jenkins VncRecorder Plugin 1.25 and earlier does not escape a parameter value in the checkVncServ form validation endpoint, resulting in a reflected cross-site… |
CVE-2020-2205 | Medium | 4.8 | 2020-07-02 | Jenkins VncRecorder Plugin 1.25 and earlier does not escape a tool path in the `checkVncServ` form validation endpoint, resulting in a stored cross-site script… |