Lucene search

K
redhatcveRedhat.comRH:CVE-2023-27900
HistoryMar 13, 2023 - 8:43 a.m.

CVE-2023-27900

2023-03-1308:43:11
redhat.com
access.redhat.com
15

0.034 Low

EPSS

Percentile

91.4%

A flaw was found in Jenkins. Affected versions of Jenkins use the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in hudson.util.MultipartFormDataParser, allowing attackers to trigger a denial of service.