CVE-2020-2200

Jenkins Play Framework Plugin 1.0.2 and earlier lets users specify the path to the `play` command on the Jenkins master for a form validation endpoint…

published June 3, 2020

CVSS
—
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

Jenkins Play Framework Plugin 1.0.2 and earlier lets users specify the path to the `play` command on the Jenkins master for a form validation endpoint, resulting in an OS command injection vulnerability exploitable by users able to store such a file on the Jenkins master.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02422 · 84.1th percentile
Published
2020-06-03T12:40Z
EPSS history
Timeline
  • 03 JUN 12:40Z
    Jenkins Play Framework Plugin 1.0.2 and earlier lets users specify the path to the `play` command on the Jenkins master for a form validation endpoint…
    cvelistv5