Lucene search
9A194021-64F2-52A4-8852-B218D3699FB9HistoryJan 23, 2024 - 7:19 p.m.
Exploit for Path Traversal in Jenkins
2024-01-2319:19:04
47
jenkins
vulnerability
mitigations
cli
http endpoint
ssh port
script console
ssh server plugin
plugin management
groovy hook script
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.97
Percentile
99.8%
= SECURITY-3314/SECURITY-3315 Mitigation
This repository docume…
This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.
Related
freebsd
freebsd
jenkins -- multiple vulnerabilities
2024-01-24 00:00:00
nessus
nessus
Jenkins LTS < 2.426.3 / Jenkins weekly < 2.442 Multiple Vulnerabilities
2024-01-24 00:00:00
FreeBSD : jenkins -- multiple vulnerabilities (8b03d274-56ca-489e-821a-cf32f07643f0)
2024-01-25 00:00:00
RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2024:0776)
2024-04-28 00:00:00
osv
osv
CVE-2024-23898
2024-01-24 18:15:09
CGA-4h3f-m3qp-f3fr
2024-06-06 12:23:38
BIT-jenkins-2024-23898
2024-03-06 10:53:43
prion
prion
Cross site scripting
2024-01-24 18:15:00
Design/Logic Flaw
2024-01-24 18:15:00
cve
cve
CVE-2024-23898
2024-01-24 18:15:09
CVE-2024-23897
2024-01-24 18:15:09
veracode
veracode
Cross-Site WebSocket Hijacking (CSWSH)
2024-01-31 07:28:49
Arbitrary File Read
2024-01-31 06:55:39
alpinelinux
alpinelinux
CVE-2024-23898
2024-01-24 18:15:09
CVE-2024-23897
2024-01-24 18:15:09
github
github
Cross-site WebSocket hijacking vulnerability in the Jenkins CLI
2024-01-24 18:31:02
Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE
2024-01-24 18:31:02
nvd
nvd
CVE-2024-23898
2024-01-24 18:15:09
CVE-2024-23897
2024-01-24 18:15:09
cvelist
cvelist
CVE-2024-23898
2024-01-24 17:52:23
CVE-2024-23897
2024-01-24 17:52:22
redhatcve
redhatcve
CVE-2024-23898
2024-01-25 20:22:19
CVE-2024-23897
2024-01-25 20:21:50
githubexploit
githubexploit
Exploit for Path Traversal in Jenkins
2024-01-29 04:41:53
Exploit for Path Traversal in Jenkins
2024-02-26 03:07:28
Exploit for Path Traversal in Jenkins
2024-02-19 02:29:12
packetstorm
packetstorm
Jenkins cli Ampersand Replacement Arbitrary File Read
2024-08-31 00:00:00
Jenkins 2.441 / LTS 2.426.3 Arbitrary File Read
2024-01-29 00:00:00
Jenkins 2.441 Local File Inclusion
2024-04-15 00:00:00
hivepro
hivepro
Critical Remote Code Execution Flaws Uncovered in Jenkins
2024-02-01 06:56:33
zdt
zdt
Jenkins 2.441 / LTS 2.426.3 Arbitrary File Read Exploit
2024-01-29 00:00:00
metasploit
metasploit
Jenkins cli Ampersand Replacement Arbitrary File Read
2024-01-30 22:12:10
exploitdb
exploitdb
Jenkins 2.441 - Local File Inclusion
2024-04-15 00:00:00
vulnrichment
vulnrichment
CVE-2024-23897
2024-01-24 17:52:22
attackerkb
attackerkb
CVE-2024-23897
2024-01-24 00:00:00
trendmicroblog
trendmicroblog
Jenkins Args4j CVE-2024-23897: Files Exposed, Code at Risk
2024-03-19 00:00:00
cisa_kev
cisa_kev
Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
2024-08-19 00:00:00
wolfi
wolfi
CVE-2024-23897 vulnerabilities
2024-09-16 09:11:42
cgr
cgr
CVE-2024-23897 vulnerabilities
2024-05-19 03:07:16
thn
thn
CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware Attacks
2024-08-20 04:53:00
Critical Jenkins Vulnerability Exposes Servers to RCE Attacks - Patch ASAP!
2024-01-25 11:57:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up 04/05/2024
2024-04-05 18:59:29
kitploit
kitploit
CVE-2024-23897 - Jenkins <= 2.441 & <= LTS 2.426.2 PoC And Scanner
2024-02-25 11:30:00
redhat
redhat
(RHSA-2024:0776) Important: jenkins and jenkins-2-plugins security update
2024-02-12 10:18:15
(RHSA-2024:0775) Important: jenkins and jenkins-2-plugins security update
2024-02-12 10:17:47
(RHSA-2024:0778) Important: Jenkins and Jenkins-2-plugins security update
2024-02-12 10:30:15
redos
redos
ROS-20240411-08
2024-04-11 00:00:00
qualysblog
qualysblog
2024 Midyear Threat Landscape Review
2024-08-06 13:00:00
Oracle Critical Patch Update, July 2024 Security Update Review
2024-07-17 14:34:50
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.97
Percentile
99.8%
Related for 9A194021-64F2-52A4-8852-B218D3699FB9