CVE-2020-2267

CVE-2020-2267 affects Jenkins MongoDB Plugin versions 1.3 and earlier, where a missing permission check allows users with Overall/Read to access metadata of arbitrary files on the Jenkins controller. The issue is described across multiple sources (Red Hat, NVD, CNVD, GHSA, OSV, etc.) with the cor...

CVE-2020-2268

CVE-2020-2268 applies to Jenkins MongoDB Plugin 1.3 and earlier. The CSRF vulnerability arises because methods implementing form validation do not perform permission checks, allowing attackers with Overall/Read permission to access metadata of arbitrary files on the Jenkins controller. The form v...