CVE-2020-2255: vulnerability in Jenkins Blue Ocean Plugin
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.9%
A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
Affected products
Jenkins project · Jenkins Blue Ocean PluginRelated CVEs — Jenkins Blue Ocean Plugin
In the same product, most dangerous first.