CVE-2020-2116

2020-02-1215:15:13

CWE-352

web.nvd.nist.gov

cve-2020-2116

jenkins

pipeline

github

notify step plugin

csrf

vulnerability

nvd

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.8%

CPENameOperatorVersion
jenkins:pipeline_github_notify_stepjenkins pipeline github notify steple1.0.4

CPE	Name	Operator	Version
jenkins:pipeline_github_notify_step	jenkins pipeline github notify step	le	1.0.4

References

www.openwall.com/lists/oss-security/2020/02/12/3

jenkins.io/security/advisory/2020-02-12/#SECURITY-812%20%281%29