CVE-2020-2268

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-2268

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2268.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-2268

Aliases

GHSA-j6p9-hm3q-hwmj

Published

2020-09-16T14:15:14.157Z

Modified

2026-03-14T10:20:34.997603Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A cross-site request forgery (CSRF) vulnerability in Jenkins MongoDB Plugin 1.3 and earlier allows attackers to gain access to some metadata of any arbitrary files on the Jenkins controller.

References

Affected packages

Git / github.com/jenkinsci/mongodb-plugin

Affected ranges

Type

GIT

Repo

https://github.com/jenkinsci/mongodb-plugin

Events

Introduced

Last affected

493ff934c1ef3f9164f500e2c25da94f9fc6e492

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3"
        }
    ]
}

Affected versions

mongodb-1.*

mongodb-1.0

mongodb-1.1

mongodb-1.2

mongodb-1.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2268.json"