Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f7f6-xrwc-9c57

Опубликовано: 14 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

Improper Input Validation in Jenkins

Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-fileupload library with the denial-of-service vulnerability known as CVE-2016-3092. The fix for that vulnerability has been backported to the version of the library bundled with Jenkins.

Пакеты

Наименование

org.jenkins-ci.main:jenkins-core

maven
Затронутые версииВерсия исправления

<= 2.73.1

2.73.2

Наименование

org.jenkins-ci.main:jenkins-core

maven
Затронутые версииВерсия исправления

>= 2.74, <= 2.83

2.84

EPSS

Процентиль: 65%
0.005
Низкий

7.5 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.5
redhat
больше 8 лет назад

Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-fileupload library with the denial-of-service vulnerability known as CVE-2016-3092. The fix for that vulnerability has been backported to the version of the library bundled with Jenkins.

CVSS3: 7.5
nvd
около 8 лет назад

Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-fileupload library with the denial-of-service vulnerability known as CVE-2016-3092. The fix for that vulnerability has been backported to the version of the library bundled with Jenkins.

CVSS3: 7.5
debian
около 8 лет назад

Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the ...

EPSS

Процентиль: 65%
0.005
Низкий

7.5 High

CVSS3

Дефекты

CWE-20