CVE-2020-2196

Jenkins Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints, allowing attackers to perform all administrative actions provided…

published June 3, 2020

CVSS
—
EPSS
1%
Percentile
60.5
In the wild
Unconfirmed
What it is

Jenkins Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints, allowing attackers to perform all administrative actions provided by the plugin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00937 · 60.5th percentile
Published
2020-06-03T12:40Z
EPSS history
Timeline
  • 03 JUN 12:40Z
    Jenkins Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints, allowing attackers to perform all administrative actions provided…
    cvelistv5