← All advisories

Low severityNVD Advisory· Published Jan 29, 2020· Updated Aug 4, 2024

CVE-2020-2105

CVE-2020-2105

Description

REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jenkins-ci.main:jenkins-coreMaven	< 2.204.2	2.204.2
org.jenkins-ci.main:jenkins-coreMaven	>= 2.205, < 2.219	2.219

Affected products

3

osv-coords2 versions
pkg:bitnami/jenkins pkg:maven/org.jenkins-ci.main/jenkins-core
< 2.218.1+ 1 more
- (no CPE)range: < 2.218.1
- (no CPE)range: < 2.204.2
Jenkins Project/Jenkinscpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

9

access.redhat.com/errata/RHBA-2020:0402ghsavendor-advisoryx_refsource_REDHATWEB
access.redhat.com/errata/RHBA-2020:0675ghsavendor-advisoryx_refsource_REDHATWEB
access.redhat.com/errata/RHSA-2020:0681ghsavendor-advisoryx_refsource_REDHATWEB
access.redhat.com/errata/RHSA-2020:0683ghsavendor-advisoryx_refsource_REDHATWEB
github.com/advisories/GHSA-7xp8-7wqx-5hqxghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-2105ghsaADVISORY
www.openwall.com/lists/oss-security/2020/01/29/1ghsamailing-listx_refsource_MLISTWEB
github.com/jenkinsci/jenkins/commit/639ade55caa05324c60d15b2fa8df27ee0111b76ghsaWEB
jenkins.io/security/advisory/2020-01-29/ghsax_refsource_CONFIRMWEB

News mentions

1

Jenkins Security Advisory 2020-01-29
Jenkins Security Advisories · Jan 29, 2020