Skip to content
Threat Feed
Subscribe

Product

Jenkins LTS Edition (< 2.426.3)

1 brief RSS
critical advisory

Jenkins: Arbitrary file read via CLI @ expansion (CVE-2024-23897)

Jenkins versions prior to 2.442 and LTS 2.426.3 contain an arbitrary file read vulnerability caused by the CLI parser improperly expanding @ file references, allowing unauthenticated attackers to read contents from the Jenkins controller filesystem.

Jenkins +1 vulnerability arbitrary-file-read cve-2024-23897
2t 1c