CVE-2020-2140: Jenkins Audit Trail

Medium severity, CVSS 6.1. EPSS: 76% chance of exploitation in the next 30 days.

Jenkins Audit Trail Plugin 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a reflected cross-site scripting vulnerability.

Affected products

• Jenkins Audit Trail: up to and including 3.2

Published 2020-03-09. Last modified 2026-06-17.