CVE-2020-2288

CVE-2020-2288: vulnerability in Jenkins Audit Trail Plugin

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
In Jenkins Audit Trail Plugin 3.6 and earlier, the default regular expression pattern could be bypassed in many cases by adding a suffix to the URL that would be ignored during request handling.
Related CVEs — Jenkins Audit Trail Plugin

In the same product, most dangerous first.