CVE-2020-2096: Jenkins GitLab Hook

Medium severity, CVSS 6.1. EPSS: 92.8% chance of exploitation in the next 30 days.

Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a reflected XSS vulnerability.

Affected products

• Jenkins GitLab Hook: up to and including 1.4.2

Published 2020-01-15. Last modified 2026-06-17.