CVSS 3.1
4.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NCVE-2020-2210
Medium (4.3) in jenkins stash branch parameter. EPSS 0.7% chance of exploitation in the next 30 days.
Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier transmits configured passwords in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
- CWE
- CWE-319
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:stash_branch_parameter
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-3f82-v3qw-53q7 | Maven | org.jenkins-ci.plugins:StashBranchParameter | <=0.3.0 | no fix published |