CVE-2020-2288

—

CVSS 3.1

5.3 medium

EPSS

<1%p59

Published

Oct 8, 2020 (Oct 8, 2020)

Modified

Jun 17, 2026

Description

In Jenkins Audit Trail Plugin 3.6 and earlier, the default regular expression pattern could be bypassed in many cases by adding a suffix to the URL that would be ignored during request handling.

Vendors: jenkins
Products: audit trail
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.