CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2020-2110
High (8.8) in jenkins script security. EPSS 1.3% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.plugins:script-security 1.70.
Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports or by using them inside of other annotations.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:script_security
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-qvmf-36h5-3f5v | Maven | org.jenkins-ci.plugins:script-security | <1.70 | 1.70 |