Lucene search
GoogleOSV:BIT-JENKINS-2023-27900HistoryMar 06, 2024 - 10:56 a.m.
BIT-jenkins-2023-27900
2024-03-0610:56:29
Google
osv.dev
14
jenkins
apache commons fileupload
cve-2023-24998
security vulnerability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.026
Percentile
90.5%
Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in hudson.util.MultipartFormDataParser, allowing attackers to trigger a denial of service.
Related
prion
prion
Denial of service
2023-03-10 21:15:00
Default credentials
2023-02-20 16:15:00
Denial of service
2023-03-10 21:15:00
redhatcve
redhatcve
CVE-2023-27900
2023-03-13 08:43:11
CVE-2023-24998
2023-02-21 21:59:14
nvd
nvd
osv
osv
Denial of service in Jenkins Core
2023-03-10 21:30:19
CVE-2023-27900
2023-03-10 21:15:15
CGA-vhv7-2gww-h7x4
2024-06-06 12:29:33
cve
cve
CVE-2023-27900
2023-03-10 21:15:15
CVE-2023-24998
2023-02-20 16:15:10
alpinelinux
alpinelinux
CVE-2023-27900
2023-03-10 21:15:00
github
github
Denial of service in Jenkins Core
2023-03-10 21:30:19
DoS vulnerabilities persist in ESAPI file uploads despite remediation of CVE-2023-24998
2023-10-27 21:55:44
Apache Commons FileUpload denial of service vulnerability
2023-02-20 18:30:17
cvelist
cvelist
CVE-2023-27900
2023-03-08 17:14:49
CVE-2023-24998 Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts
2023-02-20 15:57:07
CVE-2023-28709 Apache Tomcat: Fix for CVE-2023-24998 is incomplete
2023-05-22 10:08:49
ibm
ibm
Security Bulletin: IBM Transformation Extender Advanced is affected by a vulnerability in its dependencies
2024-09-12 19:23:24
nessus
nessus
Apache Tomcat 10.1.0.M1 < 10.1.5
2023-02-20 00:00:00
F5 Networks BIG-IP : Apache Commons FileUpload vulnerability (K000133052)
2023-06-23 00:00:00
RHEL 9 : httl (Unpatched Vulnerability)
2024-06-03 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 10.1.5
2023-01-13 00:00:00
Fixed in Apache Tomcat 9.0.71
2023-01-13 00:00:00
Fixed in Apache Tomcat 8.5.85
2023-01-19 00:00:00
vaadin
vaadin
Apache Commons FileUpload - DoS with excessive parts
2023-06-22 00:00:00
cgr
cgr
CVE-2023-24998 vulnerabilities
2024-05-19 03:07:16
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0695-1)
2023-03-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0696-1)
2023-03-28 00:00:00
Apache Tomcat DoS Vulnerability (Feb 2023) - Linux
2023-02-21 00:00:00
f5
f5
K000133052 : Apache Commons FileUpload vulnerability CVE-2023-24998
2023-03-18 00:00:00
githubexploit
githubexploit
mageia
mageia
Updated apache-commons-fileupload packages fix security vulnerability
2023-02-27 23:27:16
ubuntucve
ubuntucve
CVE-2023-24998
2023-02-20 00:00:00
CVE-2023-28709
2023-05-22 00:00:00
kaspersky
kaspersky
KLA40221 DoS vulnerability in Apache Tomcat
2023-01-13 00:00:00
KLA40220 DoS vulnerability in Apache Tomcat
2023-01-19 00:00:00
cnvd
cnvd
Apache Commons FileUpload Denial of Service Vulnerability (CNVD-2023-23552)
2023-02-22 00:00:00
redos
redos
ROS-20240815-15
2024-08-15 00:00:00
debiancve
debiancve
CVE-2023-24998
2023-02-20 16:15:10
veracode
veracode
Denial Of Service (DoS)
2023-02-24 11:02:57
wolfi
wolfi
CVE-2023-24998 vulnerabilities
2024-09-27 21:56:47
freebsd
freebsd
jenkins -- multiple vulnerabilities
2023-03-08 00:00:00
amazon
amazon
Important: tomcat8
2023-10-12 15:48:00
Important: tomcat
2024-04-11 01:07:00
Important: tomcat8
2023-07-05 21:44:00
atlassian
atlassian
Third-Party Dependency Vulnerability in Confluence
2023-07-13 10:00:53
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.026
Percentile
90.5%
Related for OSV:BIT-JENKINS-2023-27900