Package · Maven

org.jenkins-ci.plugins:selenium

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.1

CVE-2020-2196

Complete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injection

Jenkins Selenium Plugin 3.141.59 and earlier has no CSRF protection for its HTTP endpoints, allowing attackers to perform all administrative actions provided by the plugin.

Jenkins Project Jenkins Selenium Plugin org.jenkins-ci.plugins:selenium Web / CMS Maven

Jun 3, 2020