Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*

1 brief RSS
critical advisory

Jenkins: Arbitrary file read via CLI @ expansion (CVE-2024-23897)

Jenkins versions prior to 2.442 and LTS 2.426.3 contain an arbitrary file read vulnerability caused by the CLI parser improperly expanding @ file references, allowing unauthenticated attackers to read contents from the Jenkins controller filesystem.

Jenkins +1 vulnerability arbitrary-file-read cve-2024-23897
2t 1c