CVE-2020-2160

Jenkins 2.227 and earlier, LTS 2.204.5 and earlier uses different representations of request URL paths, which allows attackers to craft URLs that allow…

published March 25, 2020

CVSS
—
EPSS
2%
Percentile
81.0
In the wild
Unconfirmed
What it is

Jenkins 2.227 and earlier, LTS 2.204.5 and earlier uses different representations of request URL paths, which allows attackers to craft URLs that allow bypassing CSRF protection of any target URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02043 · 81.0th percentile
Published
2020-03-25T16:05Z
EPSS history
Timeline
  • 25 MAR 16:05Z
    Jenkins 2.227 and earlier, LTS 2.204.5 and earlier uses different representations of request URL paths, which allows attackers to craft URLs that allow…
    cvelistv5