CVE-2020-2294

—

CVSS 3.1

6.5 medium

EPSS

<1%p55

Published

Oct 8, 2020 (Oct 8, 2020)

Modified

Jun 17, 2026

Description

Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to start cascade builds and layout builds, and reconfigure the plugin.

Vendors: barchart
Products: maven cascade release
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.