CVEvulnerability
CVE-2020-2110
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-02-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports or by using them inside of other annotations.
Affected configurations
• jenkins script security (<= 1.69)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.openwall.com/lists/oss-security/2020/02/12/3 Mailing List, Third Party Advisory
- https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1713 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2020/02/12/3 Mailing List, Third Party Advisory
- https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1713 Vendor Advisory