{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3ajenkinsjenkinslts/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*","cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2024-23897"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Jenkins (\u003c 2.442)","Jenkins LTS Edition (\u003c 2.426.3)"],"_cs_severities":["critical"],"_cs_tags":["vulnerability","arbitrary-file-read","jenkins","cve-2024-23897"],"_cs_type":"advisory","_cs_vendors":["Jenkins"],"content_html":"\u003cp\u003eJenkins controller instances are vulnerable to an arbitrary file read vulnerability (CVE-2024-23897) due to a feature in the Jenkins CLI parser that replaces an '@' character followed by a file path with the content of that file. This feature is enabled by default and does not require authentication. The impact varies based on attacker permissions: users with Overall/Read permission can read full files, while unauthenticated users can read the first few lines of files depending on the CLI commands available. Public exploit code for this vulnerability is currently available.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated attackers to read sensitive files from the Jenkins controller filesystem. This may lead to the exposure of credentials, environment variables, configuration files, or other sensitive system data.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Jenkins to version 2.442 or later, or Jenkins LTS to 2.426.3 or later, immediately to disable the vulnerable CLI expansion feature.\u003c/li\u003e\n\u003cli\u003eIf patching is not immediately feasible, restrict access to the Jenkins CLI and HTTP endpoints to trusted networks only.\u003c/li\u003e\n\u003cli\u003eReview Jenkins access logs for anomalous requests to the CLI endpoint.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-25T12:41:20Z","date_published":"2026-10-25T12:41:20Z","id":"https://feed.craftedsignal.io/briefs/2026-10-jenkins-cve-2024-23897/","summary":"Jenkins versions prior to 2.442 and LTS 2.426.3 contain an arbitrary file read vulnerability caused by the CLI parser improperly expanding @ file references, allowing unauthenticated attackers to read contents from the Jenkins controller filesystem.","title":"Jenkins: Arbitrary file read via CLI @ expansion (CVE-2024-23897)","url":"https://feed.craftedsignal.io/briefs/2026-10-jenkins-cve-2024-23897/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*","version":"https://jsonfeed.org/version/1.1"}