CVE-2020-2303

A cross-site request forgery (CSRF) vulnerability in Jenkins Active Directory Plugin 2.19 and earlier allows attackers to perform connection tests, connecting to attacker-specified or previously configured Active Directory servers using attacker-specified credentials.

• CWE-352

• http://www.openwall.com/lists/oss-security/2020/11/04/6Mailing List, Third Party Advisory
• https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2126Vendor Advisory
• http://www.openwall.com/lists/oss-security/2020/11/04/6Mailing List, Third Party Advisory
• https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2126Vendor Advisory

Published

Nov 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-2300Jenkins Active Directory Plugin 2.19 and earlier does not pr…9.8
• CVE-2020-2301Jenkins Active Directory Plugin 2.19 and earlier allows atta…9.8
• CVE-2020-23014APfell 1.4 is vulnerable to authenticated reflected cross-si…5.4
• CVE-2020-23015An open redirect issue was discovered in OPNsense through 20…6.1
• CVE-2020-2302A missing permission check in Jenkins Active Directory Plugi…4.3
• CVE-2020-23026A NULL pointer dereference in the main() function dhry_1.c o…7.5
• CVE-2020-23036MEDIA NAVI Inc SMACom v1.2 was discovered to contain an inse…5.9
• CVE-2020-23037Portable Ltd Playable v9.18 contains a code injection vulner…9.8
• CVE-2020-23038Swift File Transfer Mobile v1.1.2 and below was discovered t…7.5
• CVE-2020-23039Folder Lock v3.4.5 was discovered to contain a stored cross-…5.4
• CVE-2020-2304Jenkins Subversion Plugin 2.13.1 and earlier does not config…6.5
• CVE-2020-23040Sky File v2.1.0 contains a directory traversal vulnerability…7.5