Description

A denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop.

Remediation

References

CVE-2018-1000864

Related Vulnerabilities

WordPress Plugin WordPress Email Template Designer-WP HTML Mail HTML Injection (2.9.0.3)

WordPress Plugin WordPress-Amazon-Associate (WPAA) Multiple Cross-Site Scripting Vulnerabilities (1.7.3)

WordPress Plugin Data Tables Generator by Supsystic Cross-Site Scripting (1.10.19)

WordPress Plugin UserPro-Community and User Profile Cross-Site Scripting (2.33)

WordPress Plugin Thrive Dashboard Security Bypass (2.3.9.2)

Severity

Medium

Classification

CVE-2018-1000864 CWE-835 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities