CVE-2020-2184

CVE-2020-2184: vulnerability in Jenkins CVS Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins CVS Plugin+ Monitor org.jenkins-ci.plugins:cvs

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 44%
A cross-site request forgery vulnerability in Jenkins CVS Plugin 2.15 and earlier allows attackers to create and manipulate tags, and to connect to an attacker-specified URL.
Affected products
Jenkins project · Jenkins CVS Plugin
Related CVEs — Jenkins CVS Plugin

In the same product, most dangerous first.

CVE-2020-2324—CVE-2020-2324EPSS 1.4%CVE-2022-29037—CVE-2022-29037EPSS 0.7%