SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

jenkins: Multiple vulnerabilities (CVE-2020-2160, CVE-2020-2161, CVE-2020-2162, CVE-2020-2163)

ID: oval:org.secpod.oval:def:1802007	Date: (C)2022-03-25 (M)2023-11-10
Class: PATCH	Family: unix

Jenkins 2.227 and earlier, LTS 2.204.5 and earlier uses different representations of request URL paths, which allows attackers to craft URLs that allow bypassing CSRF protection of any target URL.

Platform:

Alpine Linux 3.11

Alpine Linux 3.12

Alpine Linux 3.13

Alpine Linux 3.14

Alpine Linux 3.15

Product:

jenkins

Reference:


30480



423868



253164



909



197077



282