Lucene search
MitreCVELIST:CVE-2018-1000861HistoryDec 10, 2018 - 2:00 p.m.
CVE-2018-1000861
2018-12-1014:00:00
mitre
www.cve.org
8
A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.
Related
trendmicroblog
trendmicroblog
This Week in Security News: Unsecured Servers and Vulnerable Processors
2019-05-17 14:14:56
redhatcve
redhatcve
CVE-2018-1000861
2019-12-14 04:52:17
nuclei
nuclei
Jenkins - Remote Command Injection
2021-02-20 11:11:15
checkpoint_advisories
checkpoint_advisories
Jenkins Stapler Web Framework Remote Code Execution (CVE-2018-1000861)
2019-05-21 00:00:00
Jenkins Stapler Web Framework Code Execution (CVE-2018-1000861)
2020-09-21 00:00:00
attackerkb
attackerkb
CVE-2018-1000861
2018-12-10 00:00:00
cisa_kev
cisa_kev
prion
prion
Remote code execution
2018-12-10 14:29:00
openvas
openvas
Jenkins < 2.121.3 / < 2.138 ACL Bypass Vulnerability
2019-06-03 00:00:00
Jenkins < 2.154 and < 2.138.4 LTS Multiple Vulnerabilities - Windows
2018-12-11 00:00:00
Jenkins < 2.154 and < 2.138.4 LTS Multiple Vulnerabilities - Linux
2018-12-11 00:00:00
nvd
nvd
CVE-2018-1000861
2018-12-10 14:29:01
talosblog
talosblog
Watchbog and the Importance of Patching
2019-09-11 09:10:37
github
github
Deserialization of Untrusted Data in Jenkins
2022-05-13 01:01:00
cve
cve
CVE-2018-1000861
2018-12-10 14:29:01
osv
osv
Deserialization of Untrusted Data in Jenkins
2022-05-13 01:01:00
CVE-2018-1000861
2018-12-10 14:29:01
veracode
veracode
Arbitrary Code Execution
2019-05-16 03:23:55
canvas
canvas
Immunity Canvas: JENKINS_CHECKSCRIPT_RCE
2019-03-08 21:29:00
hackerone
hackerone
Django: Jenkins Unauthenticated RCE on https://djangoci.com/
2019-05-14 07:48:49
nessus
nessus
Jenkins < 2.138.4 LTS / 2.150.1 LTS / 2.154 Multiple Vulnerabilities
2018-12-07 00:00:00
thn
thn
Linux Botnet Adding BlueKeep-Flawed Windows RDP Servers to Its Target List
2019-07-25 09:38:00
metasploit
metasploit
Jenkins ACL Bypass and Metaprogramming RCE
2019-03-16 05:32:36
cisa
cisa
CISA Adds 15 Known Exploited Vulnerabilities to Catalog
2022-02-10 00:00:00
kitploit
kitploit
Vulmap - Web Vulnerability Scanning And Verification Tools
2020-12-25 11:30:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00