CVE-2020-2093

A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email with fixed content to an attacker-specified recipient.

Score

CVSS 3.1 8.8 High

Status

Modified - jenkinsci-cert@googlegroups.com

Published

2020-01-15

Last modified

2024-08-04

Weaknesses

CWE-352

Affected products

• Health Advisor By Cloudbees (Jenkins)
• Jenkins Health Advisor By Cloudbees Plugin (Jenkins Project)

References

• https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1708