Количество 6
Количество 6
CVE-2024-23898
Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking (CSWSH) vulnerability, allowing attackers to execute CLI commands on the Jenkins controller.
CVE-2024-23898
Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking (CSWSH) vulnerability, allowing attackers to execute CLI commands on the Jenkins controller.
CVE-2024-23898
Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.42 ...
GHSA-53ph-2r2x-vqw8
Cross-site WebSocket hijacking vulnerability in the Jenkins CLI
BDU:2024-00751
Уязвимость встроенного интерфейса командной строки (CLI) сервера автоматизации Jenkins, позволяющая нарушителю реализовать CSWSH-атаку
ROS-20240411-08
Множественные уязвимости jenkins
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-23898 Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking (CSWSH) vulnerability, allowing attackers to execute CLI commands on the Jenkins controller. | CVSS3: 8.8 | 37% Средний | почти 2 года назад |
 | CVE-2024-23898 Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking (CSWSH) vulnerability, allowing attackers to execute CLI commands on the Jenkins controller. | CVSS3: 8.8 | 37% Средний | почти 2 года назад |
| CVE-2024-23898 Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.42 ... | CVSS3: 8.8 | 37% Средний | почти 2 года назад |
| GHSA-53ph-2r2x-vqw8 Cross-site WebSocket hijacking vulnerability in the Jenkins CLI | CVSS3: 8.8 | 37% Средний | почти 2 года назад |
 | BDU:2024-00751 Уязвимость встроенного интерфейса командной строки (CLI) сервера автоматизации Jenkins, позволяющая нарушителю реализовать CSWSH-атаку | CVSS3: 8.8 | 37% Средний | почти 2 года назад |
 | ROS-20240411-08 Множественные уязвимости jenkins | CVSS3: 8.8 | больше 1 года назад |
Уязвимостей на страницу