Description

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.

Remediation

References

https://access.redhat.com/errata/RHSA-2016:0070

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01

Related Vulnerabilities

CVE-2019-1003006 Vulnerability in maven package org.jenkins-ci.plugins:groovy

CVE-2018-8319 Vulnerability in npm package msrcrypto

CVE-2022-36909 Vulnerability in maven package org.jenkins-ci.plugins:openshift-deployer

CVE-2023-31579 Vulnerability in maven package top.tangyh.basic:lamp-util

CVE-2023-34104 Vulnerability in npm package fast-xml-parser

Severity

Critical

Classification

CWE-94

Tags

Vendor Advisory