CVE-2020-2139

Description

An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file system.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

5.232

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-2138,CVE-2020-2139 are fixed in Jenkins - cobertura 1.16	Windows
Vulnerabilities CVE-2020-2138,CVE-2020-2139 are fixed in Jenkins - cobertura for Linux 1.16	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234