CVE-2020-2139

2020-03-0915:00:58

jenkins

www.cve.org

0.001 Low

EPSS

Percentile

27.0%

JSON

An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file system.

CNA Affected

[
  {
    "product": "Jenkins Cobertura Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "1.15",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]