Description REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks. Remediation References CVE-2020-2105 Related Vulnerabilities PHP Out-of-bounds Read Vulnerability (CVE-2018-20783) PHP Other Vulnerability (CVE-2006-4023) PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-8874) MediaWiki Incorrect Default Permissions Vulnerability (CVE-2017-0369) OpenSSL Key Management Errors Vulnerability (CVE-2016-7056) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-1021 CVE-2020-2105