Executive brief
CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
Affected products
- Maven org.jenkins-ci.plugins:pipeline-maven
Junglewise Threat Intelligence
CVE-2020-2235: CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
CVE-2020-2235 · Severity: low · CVSS 3 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:pipeline-maven (Maven). Vendors: Maven.
Related threats
- Improper masking of credentials in Jenkins Pipeline Maven Integration Plugin
- XML External Entity processing vulnerability in Pipeline Maven Integration Jenkins Plugin
- Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name
- Missing permission check in Jenkins Pipeline Maven Integration Plugin allows enumerating credentials IDs
- Missing permission check in Jenkins Pipeline Maven Integration Plugin allow capturing credentials