CVE-2020-2196

CVE-2020-2196: vulnerability in Jenkins Selenium Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins Selenium Plugin+ Monitor org.jenkins-ci.plugins:selenium

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
Jenkins Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints, allowing attackers to perform all administrative actions provided by the plugin.
Affected products
Jenkins project · Jenkins Selenium Plugin