deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-0238
Published: 2020-08-11
Description: In updatePreferenceIntents of AccountTypePreferenceLoader, there is a possible confused deputy attack due to a race condition. This could lead to local escalation of privilege and launching privileged activities with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-150946634
CVSS Score: 7.0 (HIGH)
CWE: CWE-367
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0239
Published: 2020-08-11
Description: In getDocumentMetadata of DocumentsContract.java, there is a possible disclosure of location metadata from a file due to a permissions bypass. This could lead to local information disclosure from a file (eg. a photo) containing location metadata with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-151095863
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0240
Published: 2020-08-11
Description: In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150706594
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0241
Published: 2020-08-11
Description: In NuPlayerStreamListener of NuPlayerStreamListener.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-151456667
CVSS Score: 7.8 (HIGH)
CWE: CWE-415, CWE-787
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0242
Published: 2020-08-11
Description: In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-151643722
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-667
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0243
Published: 2020-08-11
Description: In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-8.0 Android-8.1Android ID: A-151644303
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-667
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0247
Published: 2020-08-11
Description: In Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1Android ID: A-156087409
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755, CWE-835
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0248
Published: 2020-08-11
Description: In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-154627439
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0249
Published: 2020-08-11
Description: In postInstantAppNotif of InstantAppNotifier.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1 Android-9Android ID: A-154719656
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0250
Published: 2020-08-11
Description: In requestCellInfoUpdateInternal of PhoneInterfaceManager.java, there is a missing permission check. This could lead to local information disclosure of location data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-154934934
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0251
Published: 2020-08-11
Description: There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647626
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0252
Published: 2020-08-11
Description: There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152236803
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-787
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0253
Published: 2020-08-11
Description: There is a possible memory corruption due to a use after free.Product: AndroidVersions: Android SoCAndroid ID: A-152647365
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-787
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0254
Published: 2020-08-11
Description: There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152647751
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0256
Published: 2020-08-11
Description: In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: https://lists.debian.org/debian-lts-announce/2021/02/msg00010.html; https://source.android.com/security/bulletin/2020-08-01; https://lists.debian.org/debian-lts-announce/2021/02/msg00010.html
CVE: CVE-2020-0257
Published: 2020-08-11
Description: In SpecializeCommon of com_android_internal_os_Zygote.cpp, there is a permissions bypass due to an incomplete cleanup. This could lead to local escalation of privilege in isolated processes with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-156741968
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0258
Published: 2020-08-11
Description: In stopZygoteLocked of AppZygote.java, there is an insufficient cleanup. This could lead to local information disclosure in the application that is started next with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-157598956
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-459
References: http://packetstormsecurity.com/files/158869/Android-App-Zygotes-Improper-Guarding.html; https://source.android.com/security/bulletin/2020-08-01; http://packetstormsecurity.com/files/158869/Android-App-Zygotes-Improper-Guarding.html
CVE: CVE-2020-0259
Published: 2020-08-11
Description: In android_verity_ctr of dm-android-verity.c, there is a possible way to modify a dm-verity protected filesystem due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-157941353References: N/A
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-0260
Published: 2020-08-11
Description: There is a possible out of bounds read due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-152225183
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-08-01; https://source.android.com/security/bulletin/2020-08-01
CVE: CVE-2020-16170
Published: 2020-08-11
Description: Use of Hard-coded Credentials in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to listen in on any ongoing calls between temi robots and their users if they can brute-force/guess a six-digit value via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://www.mcafee.com/blogs/other-blogs/mcafee-labs/call-an-exorcist-my-robots-possessed/; https://www.robotemi.com/software-updates/; https://www.mcafee.com/blogs/other-blogs/mcafee-labs/call-an-exorcist-my-robots-possessed/
CVE: CVE-2020-17487
Published: 2020-08-11
Description: radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c. This is due to a malformed object identifier in IMAGE_DIRECTORY_ENTRY_SECURITY.
CVSS Score: 7.5 (HIGH)
References: https://github.com/radareorg/radare2/issues/17431; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45SGGCWFIIV7N2X2QZRREHOW7ODT3IH7/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJET3RR6W7LAK4H6VPTMAZS24W7XYHRZ/
CVE: CVE-2020-8911
Published: 2020-08-11
Description: A padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. The SDK allows users to encrypt files with AES-CBC without computing a Message Authentication Code (MAC), which then allows an attacker who has write access to the target's S3 bucket and can observe whether or not an endpoint with access to the key can decrypt a file, they can reconstruct the plaintext with (on average) 128*length (plaintext) queries to the endpoint, by exploiting CBC's ability to manipulate the bytes of the next block and PKCS5 padding errors. It is recommended to update your SDK to V2 or later, and re-encrypt your files.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://aws.amazon.com/blogs/developer/updates-to-the-amazon-s3-encryption-client/?s=09; https://github.com/google/security-research/security/advisories/GHSA-f5pg-7wfw-84q9; https://aws.amazon.com/blogs/developer/updates-to-the-amazon-s3-encryption-client/?s=09
CVE: CVE-2020-8912
Published: 2020-08-11
Description: A vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. An attacker with write access to the targeted bucket can change the encryption algorithm of an object in the bucket, which can then allow them to change AES-GCM to AES-CTR. Using this in combination with a decryption oracle can reveal the authentication key used by AES-GCM as decrypting the GMAC tag leaves the authentication key recoverable as an algebraic equation. It is recommended to update your SDK to V2 or later, and re-encrypt your files.
CVSS Score: 2.5 (LOW)
CWE: CWE-327, CWE-327
References: https://aws.amazon.com/blogs/developer/updates-to-the-amazon-s3-encryption-client/?s=09; https://github.com/google/security-research/security/advisories/GHSA-7f33-f4f5-xwgw; https://aws.amazon.com/blogs/developer/updates-to-the-amazon-s3-encryption-client/?s=09
CVE: CVE-2020-17489
Published: 2020-08-11
Description: An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visible for a brief moment upon a logout. (If the password were never shown in cleartext, only the password length is revealed.)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-522
References: http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00028.html; https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/2997; https://lists.debian.org/debian-lts-announce/2020/09/msg00014.html
CVE: CVE-2020-17495
Published: 2020-08-11
Description: django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://github.com/celery/django-celery-results/issues/142; https://github.com/celery/django-celery-results/issues/142
CVE: CVE-2020-7029
Published: 2020-08-11
Description: A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. This vulnerability could allow an unauthenticated remote attacker to perform Web administration actions with the privileged level of the authenticated user. Affected versions of Communication Manager are 7.0.x, 7.1.x prior to 7.1.3.5 and 8.0.x. Affected versions of Messaging are 7.0.x, 7.1 and 7.1 SP1.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://support.avaya.com/css/P8/documents/101070201; https://support.avaya.com/css/P8/documents/101070201
CVE: CVE-2020-8913
Published: 2020-08-12
Description: A local, arbitrary code execution vulnerability exists in the SplitCompat.install endpoint in Android's Play Core Library versions prior to 1.7.2. A malicious attacker could create an apk which targets a specific application, and if a victim were to install this apk, the attacker could perform a directory traversal, execute code as the targeted application and access the targeted application's data on the Android device. We recommend all users update Play Core to version 1.7.2 or later.
CVSS Score: 8.8 (HIGH)
CWE: CWE-281, CWE-22
References: https://blog.oversecured.com/Oversecured-automatically-discovers-persistent-code-execution-in-the-Google-Play-Core-Library/; https://developer.android.com/reference/com/google/android/play/core/release-notes#1-7-2; https://blog.oversecured.com/Oversecured-automatically-discovers-persistent-code-execution-in-the-Google-Play-Core-Library/
CVE: CVE-2020-16145
Published: 2020-08-12
Description: Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html; https://github.com/roundcube/roundcubemail/commit/a71bf2e8d4a64ff2c83fdabc1e8cb0c045a41ef4; https://github.com/roundcube/roundcubemail/commit/d44ca2308a96576b88d6bf27528964d4fe1a6b8b#diff-d3bb3391c79904494c60ee2ac2f33070
CVE: CVE-2020-16266
Published: 2020-08-12
Description: An XSS issue was discovered in MantisBT before 2.24.2. Improper escaping on view_all_bug_page.php allows a remote attacker to inject arbitrary HTML into the page by saving it into a text Custom Field, leading to possible code execution in the browser of any user subsequently viewing the issue (if CSP settings allow it).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://mantisbt.org/blog/archives/mantisbt/665; https://mantisbt.org/bugs/view.php?id=27056; https://mantisbt.org/blog/archives/mantisbt/665
CVE: CVE-2020-17372
Published: 2020-08-12
Description: SugarCRM before 10.1.0 (Q3 2020) allows XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/158847/SugarCRM-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2020/Aug/7; https://support.sugarcrm.com/Resources/Security/
CVE: CVE-2020-17373
Published: 2020-08-12
Description: SugarCRM before 10.1.0 (Q3 2020) allows SQL Injection.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.com/files/158848/SugarCRM-SQL-Injection.html; http://seclists.org/fulldisclosure/2020/Aug/9; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2020-051/
CVE: CVE-2020-6932
Published: 2020-08-12
Description: An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-150
References: http://support.blackberry.com/kb/articleDetail?articleNumber=000061411; http://support.blackberry.com/kb/articleDetail?articleNumber=000061411
CVE: CVE-2020-13278
Published: 2020-08-12
Description: Reflected Cross-Site Scripting vulnerability in Modules.php in RosarioSIS Student Information System < 6.5.1 allows remote attackers to execute arbitrary web script via embedding javascript or HTML tags in a GET request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/francoisjacquet/rosariosis/-/commit/9cb4fec5fe177f1d3716708b46d1958eac477ebe; https://gitlab.com/francoisjacquet/rosariosis/-/issues/282; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13278.json
CVE: CVE-2020-17496
Published: 2020-08-12
Description: vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74, CWE-74
References: https://blog.exploitee.rs/2020/exploiting-vbulletin-a-tale-of-patch-fail/; https://cwe.mitre.org/data/definitions/78.html; https://forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4445227-vbulletin-5-6-0-5-6-1-5-6-2-security-patch
CVE: CVE-2020-2229
Published: 2020-08-12
Description: Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the tooltip content of help icons, resulting in a stored cross-site scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/160443/Jenkins-2.235.3-Cross-Site-Scripting.html; http://www.openwall.com/lists/oss-security/2020/08/12/4; https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1955
CVE: CVE-2020-2230
Published: 2020-08-12
Description: Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Overall/Manage permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/160443/Jenkins-2.235.3-Cross-Site-Scripting.html; http://www.openwall.com/lists/oss-security/2020/08/12/4; https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1957
CVE: CVE-2020-2231
Published: 2020-08-12
Description: Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the remote address of the host starting a build via 'Trigger builds remotely', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Job/Configure permission or knowledge of the Authentication Token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/160616/Jenkins-2.251-LTS-2.235.3-Cross-Site-Scripting.html; http://www.openwall.com/lists/oss-security/2020/08/12/4; https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1960
CVE: CVE-2020-2232
Published: 2020-08-12
Description: Jenkins Email Extension Plugin 2.72 and 2.73 transmits and displays the SMTP password in plain text as part of the global Jenkins configuration form, potentially resulting in its exposure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: http://www.openwall.com/lists/oss-security/2020/08/12/4; https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1975; http://www.openwall.com/lists/oss-security/2020/08/12/4
CVE: CVE-2020-2233
Published: 2020-08-12
Description: A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: http://www.openwall.com/lists/oss-security/2020/08/12/4; https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1794%20%281%29; http://www.openwall.com/lists/oss-security/2020/08/12/4
CVE: CVE-2020-2234
Published: 2020-08-12
Description: A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2020/08/12/4; https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1794%20%282%29; http://www.openwall.com/lists/oss-security/2020/08/12/4
CVE: CVE-2020-2235
Published: 2020-08-12
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows attackers to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2020/08/12/4; https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1794%20%282%29; http://www.openwall.com/lists/oss-security/2020/08/12/4
CVE: CVE-2020-2236
Published: 2020-08-12
Description: Jenkins Yet Another Build Visualizer Plugin 1.11 and earlier does not escape tooltip content, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Run/Update permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/08/12/4; https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1940; http://www.openwall.com/lists/oss-security/2020/08/12/4
CVE: CVE-2020-2237
Published: 2020-08-12
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2020/08/12/4; https://jenkins.io/security/advisory/2020-08-12/#SECURITY-1763; http://www.openwall.com/lists/oss-security/2020/08/12/4