CVE2_Jenkins_RCE

Jenkins CLI Websocket Hijacking - PoC A proof of concept cross-site WebSocket hijacking exploit for CVE-2024-23898 — a vulnerability affecting Jenkins versions 2.217-2.441. This exploits targets the Jenkins CLI that can be used to remotely access and issue commands to a Jenkins control server...

Exploit for Origin Validation Error in Jenkins

Jenkins CLI Websocket Hijacking - PoC A proof of concept cross...

RHEL 8 : Jenkins and Jenkins-2-plugins (RHSA-2024:0778)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0778 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

CVE-2024-23898

A flaw was found in Jenkins where websocket access to the CLI does not perform origin validation of requests when they are made through the websocket endpoint...

CVE-2024-23898

creationtimestamp| type| source ---|---|--- 2024-01-24 19:27:03+00:00| seen| https://t.me/ctinow/173031 2024-01-26 22:27:11+00:00| seen| https://t.me/arpsyndicate/3097 2024-01-28 04:12:00+00:00| seen| https://t.me/arpsyndicate/3198 2024-01-29 12:46:44+00:00| published-proof-of-concept|...

org.jenkins-ci.tests:plugins-compat-tester-cli (>=1201.vb_4f0b_b_63dd3b, <=1212.vde346b_7a_dc40) potentially affected by CVE-2024-23898 via org.jenkins-ci.main:jenkins-core (2.386)

org.jenkins-ci.main:jenkins-core MAVEN version 2.386 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.tests:plugins-compat-tester-cli =1201.vb4f0bb63dd3b, =1212.vde346b7adc40 Source...

org.jenkins-ci.main:jenkins-war (2.441) potentially affected by CVE-2024-23898 via org.jenkins-ci.main:jenkins-core (2.441)

org.jenkins-ci.main:jenkins-core MAVEN version 2.441 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 2.441 Source cves: CVE-2024-23898 Source advisory:...

CVE-2024-23898

Jenkins 2.217 through 2.441 both inclusive, LTS 2.222.1 through 2.426.2 both inclusive does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking CSWSH vulnerability, allowing attackers to execute CLI commands on the Jenki...

CVE-2024-23898

Jenkins 2.217 through 2.441 both inclusive, LTS 2.222.1 through 2.426.2 both inclusive does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking CSWSH vulnerability, allowing attackers to execute CLI commands on the Jenki...

CVE-2024-23898

Jenkins 2.217 through 2.441 both inclusive, LTS 2.222.1 through 2.426.2 both inclusive does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking CSWSH vulnerability, allowing attackers to execute CLI commands on the Jenki...

org.jenkins-ci.tests:plugins-compat-tester-cli (>=1201.vb_4f0b_b_63dd3b, <=1212.vde346b_7a_dc40) potentially affected by CVE-2024-23898 via org.jenkins-ci.main:jenkins-core (2.386)

org.jenkins-ci.main:jenkins-core MAVEN version 2.386 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.tests:plugins-compat-tester-cli =1201.vb4f0bb63dd3b, =1212.vde346b7adc40 Source...