Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-27900
HistoryMar 10, 2023 - 9:15 p.m.

Denial of service

2023-03-1021:15:00
PRIOn knowledge base
www.prio-n.com
10
jenkins
lts
denial of service
apache commons fileupload
cve-2023-24998

7.6 High

AI Score

Confidence

High

0.034 Low

EPSS

Percentile

91.4%

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in hudson.util.MultipartFormDataParser, allowing attackers to trigger a denial of service.

CPENameOperatorVersion
jenkinslt2.394
jenkinslt2.375.4