CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-01-24
Arbitrary File Read and Potential RCE via Jenkins CLI Argument Parser Vulnerability (CVE-2024-23897)
[Affected Scope] Jenkins weekly version 2.441 and earlier, LTS version 2.426.2 and earlier
[Impact] Unauthenticated attackers can read arbitrary files on the Jenkins controller file system, potentially leading to Remote Code Execution (RCE) under specific conditions
[Mitigation] Immediately upgrade Jenkins weekly to 2.442 or later, and LTS to 2.426.3 or later, or disable CLI access