~ / search / GHSA-x37x-3fw2-5qw2

GHSA-x37x-3fw2-5qw2

CSRF vulnerability in Jenkins Sounds Plugin allow OS command execution

Source: GitHub Advisory Database (reviewed) High CVE-2020-2098

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:sounds < 0.6 0.6

Details

As written in the advisory (Markdown source, shown as plain text).

A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the OS user account running Jenkins.

References

External links from the advisory. They lead to third-party sites.