CVE-2020-2321

Опубликовано: 03 дек. 2020

Источник: nvd

CVSS3: 8.1

CVSS2: 5.8

EPSS Низкий

Описание

A cross-site request forgery (CSRF) vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to shelve, unshelve, or delete a project.

Ссылки

http://www.openwall.com/lists/oss-security/2020/12/03/2
Mailing List
Third Party Advisory
https://www.jenkins.io/security/advisory/2020-12-03/#SECURITY-2108
Vendor Advisory
http://www.openwall.com/lists/oss-security/2020/12/03/2
Mailing List
Third Party Advisory
https://www.jenkins.io/security/advisory/2020-12-03/#SECURITY-2108
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jenkins:shelve_project:*:*:*:*:*:jenkins:*:*

Версия до 3.0 (включая)

EPSS

Процентиль: 24%

0.0008

Низкий

8.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-9f37-ggxm-h6wx