CVE-2020-2276

Description

Jenkins Selection tasks Plugin 1.0 and earlier executes a user-specified program on the Jenkins controller, allowing attackers with Job/Configure permission to execute an arbitrary system command on the Jenkins controller as the OS user that the Jenkins process is running as.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.671

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2022-30967,CVE-2020-2276 are affected in Jvnet - selection-tasks-plugin 1.0	Windows
Vulnerabilities CVE-2022-30967,CVE-2020-2276 are affected in Jvnet - selection-tasks-plugin for Linux 1.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234