CVE-2024-23897

Product

Jenkins / Jenkins Command Line Interface (CLI)

Vulnerability

Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

Added to KEV

Aug 19, 2024

Remediate by

Sep 9, 2024

Known ransomware use

Yes

Summary description

Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314; https://nvd.nist.gov/vuln/detail/CVE-2024-23897