Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8wrx-j32g-7fcf

Опубликовано: 02 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML.

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML.

EPSS

Процентиль: 20%
0.00276
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 4.3
redhat
14 дней назад

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML.

CVSS3: 4.3
nvd
14 дней назад

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML.

EPSS

Процентиль: 20%
0.00276
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-502