Skip to content
OpenAdvisories

Archive

24 January 2024

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-23897 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE

    Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files …

    KEV Aug 19, 2024