Description

A denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop.

Remediation

References

CVE-2018-1000864

Related Vulnerabilities

Magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-8130)

WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (6.0.21)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35984)

WordPress Plugin Migration, Backup, Staging-WPvivid Directory Traversal (0.9.75)

WordPress Plugin Contact Form 7 International Sms Integration Cross-Site Scripting (1.2)

Severity

Medium

Classification

CVE-2018-1000864 CWE-835 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities