PT-2022-13249 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.333 and earlier Jenkins LTS versions 2.319.2 and earlier Description: The issue is related to custom XStream converters that have not been updated to apply protections, allowing unconstrained resource usage. Recommendations...