CVE-2024-23897 Known ransomware use

Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

Jenkins — Jenkins Command Line Interface (CLI)

Added to KEV catalog: 19 August 2024
Federal remediation due date: 9 September 2024
Weakness classification (CWE): CWE-27

CISA Description

Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314; https://nvd.nist.gov/vuln/detail/CVE-2024-23897

View on NVD View on MITRE CVE View full CISA catalog

More Jenkins Vulnerabilities

CVE-2017-1000353

Jenkins Remote Code Execution Vulnerability

CVE-2015-5317

Jenkins User Interface (UI) Information Disclosure Vulnerability

CVE-2019-1003029

Jenkins Script Security Plugin Sandbox Bypass Vulnerability

CVE-2019-1003030

Jenkins Matrix Project Plugin Remote Code Execution Vulnerability

CVE-2018-1000861

Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services