CVE-2020-2248: 
Java vulnerability analysis and mitigation

CVE-2020-2248 is a high severity vulnerability affecting the Jenkins JSGames Plugin version 0.2 and earlier, discovered by Jonathan Leitschuh and disclosed on September 1, 2020. The vulnerability exists in the plugin's handling of URL parameters, where it evaluates part of a URL as code (Jenkins Advisory, OSS Security).

The vulnerability is classified as a reflected cross-site scripting (XSS) vulnerability with a severity rating of High according to CVSS. The core issue lies in the plugin's functionality where it evaluates part of a URL as code, leading to potential code execution through URL manipulation (Jenkins Advisory).

The vulnerability allows attackers to execute reflected cross-site scripting (XSS) attacks through URL manipulation. This could potentially lead to unauthorized code execution within the context of the Jenkins environment (Jenkins Advisory).

The vulnerability is exploitable through URL manipulation, where an attacker can inject malicious code that gets evaluated by the plugin. As of the advisory's publication date, there were no public reports of this vulnerability being exploited in the wild (Jenkins Advisory).

As of the publication of the security advisory on September 1, 2020, no fix was available for this vulnerability. Users of the JSGames Plugin should consider removing or disabling the plugin until a security fix is released (Jenkins Advisory).