CVE-2020-2097: Jenkins Sounds

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with Overall/Read access to execute arbitrary OS commands as the OS user account running Jenkins.

Affected products

• Jenkins Sounds: up to and including 0.5

Published 2020-01-15. Last modified 2026-06-17.