Executive brief
CSRF vulnerability in Jenkins Active Directory Plugin
Affected products
- Maven org.jenkins-ci.plugins:active-directory
Junglewise Threat Intelligence
CVE-2020-2303: CSRF vulnerability in Jenkins Active Directory Plugin
CVE-2020-2303 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:active-directory (Maven). Vendors: Maven.
Related threats
- Jenkins Active Directory Plugin LDAP injection in ADSI authentication path
- Jenkins Active Directory Plugin deserialization via LDAP referrals
- Jenkins Active Directory Plugin RCE via LDAP referral following
- Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosure
- Missing permission check in Jenkins Active Directory Plugin allows accessing domain health check page