description: Jenkins Log Parser Plugin 2.0 and earlier did not escape an error message, resulting in a cross-site scripting vulnerability exploitable by users able to define log parsing rules.
affected:
{
product: Jenkins Log Parser Plugin
vendor: Jenkins project
versions:
status: affected, version: 2.0 and earlier
}