Description
A denial of service vulnerability exists in Jenkins Monitoring Plugin 1.74.0 and earlier in PluginImpl.java that allows attackers to kill threads running on the Jenkins master.
Remediation
References
https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1153
Related Vulnerabilities
CVE-2023-50764 Vulnerability in maven package org.jenkins-ci.plugins:scriptler
CVE-2023-46233 Vulnerability in npm package crypto-js
CVE-2022-34805 Vulnerability in maven package org.jenkins-ci.plugins:skype-notifier
CVE-2013-4002 Vulnerability in maven package xerces:xercesimpl
CVE-2023-37965 Vulnerability in maven package org.jenkins-ci.plugins:elasticbox