CVE-2020-2139: vulnerability in Jenkins Cobertura Plugin
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.6%
An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file system.
Affected products
Jenkins project · Jenkins Cobertura PluginRelated CVEs — Jenkins Cobertura Plugin
In the same product, most dangerous first.