Логотип exploitDog
bind:CVE-2018-1000861
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2018-1000861

Количество 5

Количество 5

redhat логотип

CVE-2018-1000861

около 7 лет назад

A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.

CVSS3: 8.8
EPSS: Критический
nvd логотип

CVE-2018-1000861

около 7 лет назад

A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.

CVSS3: 9.8
EPSS: Критический
debian логотип

CVE-2018-1000861

около 7 лет назад

A code execution vulnerability exists in the Stapler web framework use ...

CVSS3: 9.8
EPSS: Критический
github логотип

GHSA-hhpm-5cp2-hg4x

больше 3 лет назад

Deserialization of Untrusted Data in Jenkins

CVSS3: 9.8
EPSS: Критический
fstec логотип

BDU:2022-04793

около 7 лет назад

Уязвимость функции в stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java компонента Stapler сервера автоматизации Jenkins, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.8
EPSS: Критический

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2018-1000861

A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.

CVSS3: 8.8
94%
Критический
около 7 лет назад
nvd логотип
CVE-2018-1000861

A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.

CVSS3: 9.8
94%
Критический
около 7 лет назад
debian логотип
CVE-2018-1000861

A code execution vulnerability exists in the Stapler web framework use ...

CVSS3: 9.8
94%
Критический
около 7 лет назад
github логотип
GHSA-hhpm-5cp2-hg4x

Deserialization of Untrusted Data in Jenkins

CVSS3: 9.8
94%
Критический
больше 3 лет назад
fstec логотип
BDU:2022-04793

Уязвимость функции в stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java компонента Stapler сервера автоматизации Jenkins, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.8
94%
Критический
около 7 лет назад

Уязвимостей на страницу