Description

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.

Remediation

References

CVE-2014-3666

Related Vulnerabilities

WordPress Plugin Advanced Custom Fields PRO PHP Object Injection (6.0.7)

Drupal Core 6.x Security Bypass (6.0 - 6.1)

Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0455)

Apache HTTP Server Other Vulnerability (CVE-2003-0192)

Chamilo Other Vulnerability (CVE-2023-34962)

Severity

High

Classification

CVE-2014-3666 CWE-94

Tags

Missing Update Known Vulnerabilities