CVE-2020-2281: Jenkins Lockable Resources

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources.

Affected products

• Jenkins Lockable Resources: up to and including 2.8

Published 2020-09-23. Last modified 2026-06-17.