Sign in

Not rated

CVE-2020-2240 A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to execute…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to execute arbitrary SQL scripts.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins database Plugin 1.6	earliest → 1.6	No fix stated

The 3 CVEs of Jenkins database Plugin →

CVE-2020-2242 A missing permission check in Jenkins database Plugin 1.6 and earlier allows attackers with Overall/Read access to… Not rated CVE-2020-2241 A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to connect… Not rated

Do you use Jenkins database Plugin?

Track this CVE Watch Jenkins database Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2020-2240

Timeline

Published September 1, 2020
Last modified August 4, 2024

References

jenkins.io jenkins.io
[oss-security] 20200901 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE