CVE-2020-2098: Jenkins Sounds

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the OS user account running Jenkins.

Affected products

• Jenkins Sounds: up to and including 0.5

Published 2020-01-15. Last modified 2026-06-17.