vendor:
Jenkins
by:
Matisse Beckandt (Backendt)
8.1
CVSS
CRITICAL
Local File Inclusion
98
CWE
Product Name: Jenkins
Affected Version From: 2.441
Affected Version To: 2.441
Patch Exists: NO
Related CWE: CVE-2024-23897
CPE: jenkins:jenkins:2.441
Platforms Tested: Debian 12 (Bookworm)
2024
Jenkins 2.441 – Local File Inclusion
The exploit allows an attacker to perform local file inclusion in Jenkins version 2.441. By exploiting this vulnerability, the attacker can read arbitrary files on the target system. This vulnerability has been assigned CVE-2024-23897.
Mitigation:
To mitigate this vulnerability, it is recommended to update Jenkins to a patched version or apply vendor-supplied fixes.