Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-2261. PoCs published by shoucheng3.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2020-2261, a vulnerability in the Perfecto Jenkins Plugin. The exploit demonstrates how an attacker can manipulate environment variables and execute arbitrary commands through the plugin's build wrapper functionality.
Description
Jenkins Perfecto Plugin 1.17 and earlier executes a command on the Jenkins controller, allowing attackers with Job/Configure permission to run arbitrary commands on the Jenkins controller
Exploits (1)
This repository contains a proof-of-concept exploit for CVE-2020-2261, a vulnerability in the Perfecto Jenkins Plugin. The exploit demonstrates how an attacker can manipulate environment variables and execute arbitrary commands through the plugin's build wrapper functionality.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H