Description REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks. Remediation References CVE-2020-2105 Related Vulnerabilities WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-5611) WordPress Plugin Facebook Page Feed Timeline Cross-Site Scripting (1.0) Liferay DXP Observable Timing Discrepancy Vulnerability (CVE-2025-43754) MySQL CVE-2018-3203 Vulnerability (CVE-2018-3203) WordPress Other Vulnerability (CVE-2006-1796) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-1021 CVE-2020-2105