Lucene search

CVE-2020-2296

🗓️ 08 Oct 2020 13:12:15Reported by jenkinsType

Cross-site request forgery (CSRF) vuln in Jenkins Shared Objects Plugin 0.44, allows attackers to configure shared objects

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Prion	Cross site request forgery (csrf)	8 Oct 202013:15	–	prion
NVD	CVE-2020-2296	8 Oct 202013:15	–	nvd
Cvelist	CVE-2020-2296	8 Oct 202012:40	–	cvelist
OSV	CSRF vulnerability in Jenkins Shared Objects Plugin	24 May 202217:30	–	osv
Github Security Blog	CSRF vulnerability in Jenkins Shared Objects Plugin	24 May 202217:30	–	github

Nvd

Node

jenkins shared_objectsRange≤0.44jenkins

[
  {
    "product": "Jenkins Shared Objects Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "0.44",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "unknown",
        "version": "next of 0.44",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
jenkins	www.jenkins.io/security/advisory/2020-10-08/
openwall	www.openwall.com/lists/oss-security/2020/10/08/5

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Oct 2020 13:15Current

4.6Medium risk

Vulners AI Score4.6

CVSS24.3

CVSS34.3

EPSS0.02802

CWE-352