CVE-2020-2113: Jenkins Git Parameter

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Jenkins Git Parameter Plugin 0.9.11 and earlier does not escape the default value shown on the UI, resulting in a stored cross-site scripting vulnerability exploitable by users with Job/Configure permission.

Affected products

• Jenkins Git Parameter: up to and including 0.9.11

Published 2020-02-12. Last modified 2026-06-17.