In short
- CVE-2020-2294 is a MEDIUM (CVSS 6.5) vulnerability affecting com.barchart.jenkins:maven-release-cascade, maven cascade release (barchart).
- Chance of exploitation in the next 30 days (EPSS): 0.81%, higher than 57.0% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to start cascade builds and layout builds, and reconfigure the plugin.
NVD description
Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to start cascade builds and layout builds, and reconfigure the plugin.
More vulnerabilities in com.barchart.jenkins:maven-release-cascade
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free