CVE-2020-2268

CVE-2020-2268

EPSS 0.7%

A cross-site request forgery (CSRF) vulnerability in Jenkins MongoDB Plugin 1.3 and earlier allows attackers to gain access to some metadata of any arbitrary files on the Jenkins controller.

Productos afectados

Jenkins project · Jenkins MongoDB Plugin

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1904 http://www.openwall.com/lists/oss-security/2020/09/16/3