CVE-2020-2139

An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file system.
Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:cobertura:*:*:*:*:*:jenkins:*:*

History

No history.

Information

Published : 2020-03-09 16:15

Updated : 2023-10-25 18:16


NVD link : CVE-2020-2139

Mitre link : CVE-2020-2139

CVE.ORG link : CVE-2020-2139


JSON object : View

Products Affected

jenkins

  • cobertura
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')