CVE-2020-2293

CVE-2020-2293: vulnerability in Jenkins Persona Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins Persona Plugin+ Monitor org.jenkins-ci.plugins:persona

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
Jenkins Persona Plugin 2.4 and earlier allows users with Overall/Read permission to read arbitrary files on the Jenkins controller.
Affected products
Jenkins project · Jenkins Persona Plugin