CVE-2020-2287

Jenkins Audit Trail Plugin 3.6 and earlier applies pattern matching to a different representation of request URL paths than the Stapler web framework uses for…

published October 8, 2020

CVSS
—
EPSS
1%
Percentile
67.1
In the wild
Unconfirmed
What it is

Jenkins Audit Trail Plugin 3.6 and earlier applies pattern matching to a different representation of request URL paths than the Stapler web framework uses for dispatching requests, which allows attackers to craft URLs that bypass request logging of any target URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01169 · 67.1th percentile
Published
2020-10-08T12:40Z
EPSS history
Timeline
  • 08 OCT 12:40Z
    Jenkins Audit Trail Plugin 3.6 and earlier applies pattern matching to a different representation of request URL paths than the Stapler web framework uses for…
    cvelistv5