Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2020-2295

A cross-site request forgery (CSRF) vulnerability in Jenkins Maven Cascade Release Plugin 1.3.2 and earlier allows attackers to start cascade builds and layout builds, and reconfigure the plugin.

VectorNETWORK

PublishedOct 08, 2020, 13:15

Published Byjenkinsci-cert@googlegroups.com

Base Score

Score6.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

com.barchart.jenkins:maven-release-cascade(Maven)0N/AN/A

References

http://www.openwall.com/lists/oss-security/2020/10/08/5
https://www.jenkins.io/security/advisory/2020-10-08/#SECURITY-2049

Weakness Type

CWE-352

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK