Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-1003022 EUVD-2022-4226GHSA-hw83-jpxr-g225

Jenkins Monitoring Plugin vulnerable to Denial of service vulnerability

Published Feb 6, 2019 · Updated Sep 16, 2024 · Assigned by jenkins

Description

A denial of service vulnerability exists in Jenkins Monitoring Plugin 1.74.0 and earlier in PluginImpl.java that allows attackers to kill threads running on the Jenkins master.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Monitoring Plugin 1.74.0 and earlier —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jvnet.hudson.plugins:monitoring < 1.75.0 1.75.0 GHSA-hw83-jpxr-g225

References