Home

CVE-2020-2105

Description

REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks.

Risk Information

Base Score
5.4
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.345

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Jenkins 2.218Windows
Multiple vulnerabilities are fixed in Jenkins-Core 2.204.2Windows
Multiple vulnerabilities are fixed in Jenkins-Core 2.219Windows
Multiple vulnerabilities affected in Jenkins 2.218 (For Ubuntu)Linux
Multiple vulnerabilities affected in Jenkins 2.218 (For Debian)Linux
Multiple vulnerabilities affected in Jenkins 2.218 (For Centos)Linux
Multiple vulnerabilities affected in Jenkins 2.218 (For RedHat)Linux
Multiple vulnerabilities affected in Jenkins 2.218 (For Suse)Linux
Multiple vulnerabilities are fixed in Jenkins-Core for Linux 2.204.2Linux
Multiple vulnerabilities are fixed in Jenkins-Core for Linux 2.219Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234