CVE-2020-2098

A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the OS user account running Jenkins.

Score

CVSS 3.1 8.8 High

Status

Modified - jenkinsci-cert@googlegroups.com

Published

2020-01-15

Last modified

2024-08-04

Weaknesses

CWE-352

Affected products

• Sounds (Jenkins)
• Jenkins Sounds Plugin (Jenkins Project)

References

• https://jenkins.io/security/advisory/2020-01-15/#SECURITY-814