CVE-2020-2241: CSRF
Published Sep 1, 2020
·Updated
A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to connect to an attacker-specified database server using attacker-specified credentials.
Affected Software
2 affected componentsFixes available
maven/org.jenkins-ci.plugins:database<=1.6
1.7
Jenkins Database Jenkins<=1.6
Event History
Sep 1, 2020
CVE Published
via MITRE·01:50 PM
Data Sourced
via MITRE·01:50 PM
Description
May 24, 2022
Advisory Published
05:27 PM
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-2241.
2
What is the title of this vulnerability?
The title of this vulnerability is a cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier.
3
What is the severity of CVE-2020-2241?
CVE-2020-2241 has a severity rating of 8.8 (high).
4
Which software versions are affected by this vulnerability?
Jenkins database Plugin versions up to and including 1.6 are affected by this vulnerability.
5
How can an attacker exploit CVE-2020-2241?
An attacker can exploit this vulnerability by performing a cross-site request forgery attack to connect to an attacker-specified database server using attacker-specified credentials.