CVE-2020-2241

2020-09-0114:15:12

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.2%

JSON

A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to connect to an attacker-specified database server using attacker-specified credentials.

CPENameOperatorVersion
database-plugineqdatabase-1.3
database-plugineqdatabase-1.2
database-plugineqdatabase-1.0
database-plugineqdatabase-1.4.1
database-plugineqdatabase-1.4
database-plugineqdatabase-1.6
database-plugineqdatabase-1.1
database-plugineqdatabase-1.5

Name	Operator	Version
database-plugin	eq	database-1.3
database-plugin	eq	database-1.2
database-plugin	eq	database-1.0
database-plugin	eq	database-1.4.1
database-plugin	eq	database-1.4
database-plugin	eq	database-1.6
database-plugin	eq	database-1.1
database-plugin	eq	database-1.5