CVE-2020-2320
1 advisory.
Maven/io.jenkins.plugin-management:plugin-management-parent-pom CVE-2020-2320: critical 9.8
Jenkins Plugin Installation Manager Tool did not verify plugin downloads
Action: Upgrade io.jenkins.plugin-management:plugin-management-parent-pom to 2.2.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.0 | - |
Fixed versions
| 2.2.0 |
Sources
- osv: GHSA-m8r4-c7jm-w782
- https://nvd.nist.gov/vuln/detail/CVE-2020-2320
- https://github.com/jenkinsci/plugin-installation-manager-tool/commit/dfc745c3a97a3fea74a3fe2e92d8a4440cbbf867
- https://github.com/jenkinsci/plugin-installation-manager-tool
- https://www.jenkins.io/security/advisory/2020-12-03/#SECURITY-1856
- http://www.openwall.com/lists/oss-security/2020/12/03/2
CVE-2020-2320 · published · modified · JSON