Complete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injection

高危 8.0CVE-2020-2196 · GHSA-rp4x-xpgf-4xv7 · Published 03/06/2020 · updated 17/06/2026

要点

CVE-2020-2196 是影响 org.jenkins-ci.plugins:selenium, selenium (jenkins) 的高危 (CVSS 8.0)漏洞。
未来 30 天内被利用的概率（EPSS）：0.94%，高于 61.0% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:selenium Maven	`≤ 3.141.59`	No fix yet
selenium jenkins	`≤ 3.141.59`	No fix yet

Description

Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints.

This allows attackers to perform the following actions:

Restart the Selenium Grid hub.
Delete or replace the plugin configuration.
Start, stop, or restart Selenium configurations on specific nodes.

Through carefully chosen configuration parameters, these actions can result in OS command injection on the Jenkins controller.

NVD description

Jenkins Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints, allowing attackers to perform all administrative actions provided by the plugin.

References

nvd.nist.gov/vuln/detail/CVE-2020-2196 · ADVISORY
jenkinsci/selenium-plugin · PACKAGE
jenkins.io/security/advisory/2020-06-03 · WEB
openwall.com/lists/oss-security/2020/06/03/3 · WEB
openwall.com/lists/oss-security/2022/04/14/2 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.jenkins-ci.plugins:selenium

Maven

≤ 3.141.59

No fix yet

selenium

jenkins

≤ 3.141.59

No fix yet

Description

Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints.

This allows attackers to perform the following actions:

Restart the Selenium Grid hub.
Delete or replace the plugin configuration.
Start, stop, or restart Selenium configurations on specific nodes.

Through carefully chosen configuration parameters, these actions can result in OS command injection on the Jenkins controller.

NVD description

Jenkins Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints, allowing attackers to perform all administrative actions provided by the plugin.