Medium severity5.3NVD Advisory· Published Oct 8, 2020· Updated Jun 17, 2026

CVE-2020-2287

Description

Jenkins Audit Trail Plugin 3.6 and earlier applies pattern matching to a different representation of request URL paths than the Stapler web framework uses for dispatching requests, which allows attackers to craft URLs that bypass request logging of any target URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:audit-trailMaven	< 3.7	3.7

Affected products

Jenkins Project/Audit Trail
cpe:2.3:a:jenkins:audit_trail:*:*:*:*:*:jenkins:*:*
Range: <=3.6
ghsa-coords
pkg:maven/org.jenkins-ci.plugins/audit-trail
Range: < 3.7
Jenkins Project/Jenkins Audit To Database Plugincpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2020/10/08/5nvdThird Party AdvisoryWEB
github.com/advisories/GHSA-rpj6-2q8r-98f8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-2287ghsaADVISORY
www.jenkins.io/security/advisory/2020-10-08/nvdVendor AdvisoryWEB
github.com/jenkinsci/audit-trail-plugin/commit/329c6090c1c444a16e95757e537b0cbb2347a9f4ghsaWEB

News mentions

Jenkins Security Advisory 2020-10-08
Jenkins Security Advisories · Oct 8, 2020

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000