CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Arbitrary File Read and Potential RCE via Jenkins CLI Argument Parser Vulnerability (CVE-2024-23897)
[Affected Scope] Jenkins weekly version 2.441 and earlier, LTS version 2.426.2 and earlier
[Impact] Unauthenticated attackers can read arbitrary files on the Jenkins controller file system, potentially leading to Remote Code Execution (RCE) under specific conditions
[Mitigation] Immediately upgrade Jenkins weekly to 2.442 or later, and LTS to 2.426.3 or later, or disable CLI access
Jenkins CLI Java Deserialization Remote Code Execution Vulnerability Analysis (CVE-2017-1000353)
[Affected Scope] Jenkins weekly versions 2.56 and earlier, and LTS versions 2.46.1 and earlier
[Impact] Unauthenticated remote attackers can execute arbitrary system commands and fully compromise the Jenkins master node by sending a serialized Java SignedObject
[Mitigation] Immediately upgrade Jenkins to version 2.57+ or LTS 2.46.2+, and disable the legacy remoting-based CLI protocol