Lucene search
PRIOn knowledge basePRION:CVE-2024-23898HistoryJan 24, 2024 - 6:15 p.m.
Cross site scripting
2024-01-2418:15:00
PRIOn knowledge base
www.prio-n.com
8
jenkins
vulnerability
websocket hijacking
cli commands
security
Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking (CSWSH) vulnerability, allowing attackers to execute CLI commands on the Jenkins controller.
Related
veracode
veracode
Cross-Site WebSocket Hijacking (CSWSH)
2024-01-31 07:28:49
osv
osv
CVE-2024-23898
2024-01-24 18:15:09
Cross-site WebSocket hijacking vulnerability in the Jenkins CLI
2024-01-24 18:31:02
BIT-jenkins-2024-23898
2024-03-06 10:53:43
alpinelinux
alpinelinux
CVE-2024-23898
2024-01-24 18:15:09
github
github
Cross-site WebSocket hijacking vulnerability in the Jenkins CLI
2024-01-24 18:31:02
cve
cve
CVE-2024-23898
2024-01-24 18:15:09
redhatcve
redhatcve
CVE-2024-23898
2024-01-25 20:22:19
cvelist
cvelist
CVE-2024-23898
2024-01-24 17:52:23
nvd
nvd
CVE-2024-23898
2024-01-24 18:15:09
freebsd
freebsd
jenkins -- multiple vulnerabilities
2024-01-24 00:00:00
nessus
nessus
Jenkins LTS < 2.426.3 / Jenkins weekly < 2.442 Multiple Vulnerabilities
2024-01-24 00:00:00
FreeBSD : jenkins -- multiple vulnerabilities (8b03d274-56ca-489e-821a-cf32f07643f0)
2024-01-25 00:00:00
RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2024:0776)
2024-04-28 00:00:00
redhat
redhat
(RHSA-2024:0776) Important: jenkins and jenkins-2-plugins security update
2024-02-12 10:18:15
(RHSA-2024:0775) Important: jenkins and jenkins-2-plugins security update
2024-02-12 10:17:47
(RHSA-2024:0778) Important: Jenkins and Jenkins-2-plugins security update
2024-02-12 10:30:15
redos
redos
ROS-20240411-08
2024-04-11 00:00:00