CVE-2020-2140: 
Java vulnerability analysis and mitigation

CVE-2020-2140 affects the Jenkins Audit Trail Plugin versions 3.2 and earlier. The vulnerability was discovered and disclosed in March 2020, identified as a cross-site scripting (XSS) vulnerability in the URL Patterns field form validation functionality (Jenkins Advisory, CVE Mitre).

The vulnerability is a reflected cross-site scripting (XSS) issue that occurs due to improper escaping of error messages in the URL Patterns field form validation. The severity is rated as Medium according to CVSS scoring system. The vulnerability can be exploited similar to a stored cross-site scripting vulnerability by users with Overall/Administer permission (Jenkins Advisory).

When exploited, this vulnerability allows attackers with administrative access to execute cross-site scripting attacks through the URL Patterns field form validation. The vulnerability can be leveraged both as a reflected XSS and in a manner similar to stored XSS, potentially affecting Jenkins administrators (Jenkins Advisory).

The vulnerability has been fixed in Audit Trail Plugin version 3.3, which properly escapes the affected part of the error message. Users are advised to upgrade to this version to mitigate the vulnerability (Jenkins Advisory).