CVE-2020-2098

Description

A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the OS user account running Jenkins.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.167

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-2097,CVE-2020-2098 are fixed in Jenkins - sounds 0.6	Windows
Vulnerabilities CVE-2020-2097,CVE-2020-2098 are fixed in Jenkins - sounds for Linux 0.6	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234