CVE-2020-2241

The CVE-2020-2241 entry describes a CSRF vulnerability in Jenkins Database Plugin versions 1.6 and earlier that lets attackers connect to an attacker-controlled database server using attacker-specified credentials. The issue stems from insufficient CSRF protection in the affected form validation,...

CVE-2020-2242

CVE-2020-2242 — Jenkins Database Plugin : Jenkins Database Plugin versions 1.6 and earlier lack a permission check, allowing users with Overall/Read access to connect to an attacker‑specified database server using attacker‑specified credentials. The issue’s impact is that an attacker may trigger ...

CVE-2020-2240

CVE-2020-2240 pertains to Jenkins Database Plugin (versions ≤ 1.6). The issue is a CSRF vulnerability arising from a lack of proper origin validation, enabling an attacker to trigger unintended requests and execute arbitrary SQL scripts against the plugin’s database. Several sources (Red Hat, CNV...