CVE-2020-2322: Netflix Chaos Monkey

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to generate load and to generate memory leaks.

Affected products

• Netflix Chaos Monkey: up to and including 0.3

Published 2020-12-03. Last modified 2026-06-17.