Lucene search
Redhat.comRH:CVE-2018-1000861HistoryDec 14, 2019 - 4:52 a.m.
CVE-2018-1000861
2019-12-1404:52:17
redhat.com
access.redhat.com
70
0.973 High
EPSS
Percentile
99.9%
A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.
Related
cvelist
cvelist
CVE-2018-1000861
2018-12-10 14:00:00
trendmicroblog
trendmicroblog
This Week in Security News: Unsecured Servers and Vulnerable Processors
2019-05-17 14:14:56
nuclei
nuclei
Jenkins - Remote Command Injection
2021-02-20 11:11:15
checkpoint_advisories
checkpoint_advisories
Jenkins Stapler Web Framework Remote Code Execution (CVE-2018-1000861)
2019-05-21 00:00:00
Jenkins Stapler Web Framework Code Execution (CVE-2018-1000861)
2020-09-21 00:00:00
cisa_kev
cisa_kev
prion
prion
Remote code execution
2018-12-10 14:29:00
attackerkb
attackerkb
CVE-2018-1000861
2018-12-10 00:00:00
osv
osv
Deserialization of Untrusted Data in Jenkins
2022-05-13 01:01:00
CVE-2018-1000861
2018-12-10 14:29:01
veracode
veracode
Arbitrary Code Execution
2019-05-16 03:23:55
cve
cve
CVE-2018-1000861
2018-12-10 14:29:01
talosblog
talosblog
Watchbog and the Importance of Patching
2019-09-11 09:10:37
openvas
openvas
Jenkins < 2.121.3 / < 2.138 ACL Bypass Vulnerability
2019-06-03 00:00:00
Jenkins < 2.154 and < 2.138.4 LTS Multiple Vulnerabilities - Windows
2018-12-11 00:00:00
Jenkins < 2.154 and < 2.138.4 LTS Multiple Vulnerabilities - Linux
2018-12-11 00:00:00
nvd
nvd
CVE-2018-1000861
2018-12-10 14:29:01
github
github
Deserialization of Untrusted Data in Jenkins
2022-05-13 01:01:00
hackerone
hackerone
Django: Jenkins Unauthenticated RCE on https://djangoci.com/
2019-05-14 07:48:49
canvas
canvas
Immunity Canvas: JENKINS_CHECKSCRIPT_RCE
2019-03-08 21:29:00
nessus
nessus
Jenkins < 2.138.4 LTS / 2.150.1 LTS / 2.154 Multiple Vulnerabilities
2018-12-07 00:00:00
thn
thn
Linux Botnet Adding BlueKeep-Flawed Windows RDP Servers to Its Target List
2019-07-25 09:38:00
cisa
cisa
CISA Adds 15 Known Exploited Vulnerabilities to Catalog
2022-02-10 00:00:00
kitploit
kitploit
Vulmap - Web Vulnerability Scanning And Verification Tools
2020-12-25 11:30:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00