Not rated
CVE-2020-2303 A cross-site request forgery (CSRF) vulnerability in Jenkins Active Directory Plugin 2.19 and earlier allows attackers…
Description
A cross-site request forgery (CSRF) vulnerability in Jenkins Active Directory Plugin 2.19 and earlier allows attackers to perform connection tests, connecting to attacker-specified or previously configured Active Directory servers using attacker-specified credentials.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Active Directory Plugin 2.19 | earliest → 2.19 | No fix stated |
| Jenkins Active Directory Plugin 2.16 | earliest → < 2.16.1 | 2.16.1 |
References
- www.jenkins.io www.jenkins.io
- [oss-security] 20201104 Multiple vulnerabilities in Jenkins plugins www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of Jenkins Active Directory Plugin
The 11 CVEs of Jenkins Active Directory Plugin →
CVE-2026-57288
Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search…
3.7
Low
CVE-2026-48918
Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default
6.6
Medium
CVE-2026-48919
Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation
6.6
Medium
CVE-2023-37943
Jenkins Active Directory Plugin 2.30 and earlier ignores the "Require TLS" and "StartTls" options and always performs…
Not rated