Skip to main content
← All vulnerabilities
CVE-2013-0330GHSA-25C5-58XW-HW5Q

Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to build arbitr

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 1.502, 1.480.3
None on Exploit-DB, Metasploit or GitHub

Summary

Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to build arbitrary jobs via unknown attack vectors.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

  • org.jenkins-ci.main:jenkins-coreMaven

    From 1.481 · fixed in 1.502

  • org.jenkins-ci.main:jenkins-coreMaven

    fixed in 1.480.3

References 6

rhn.redhat.com

openwall.com

securityfocus.com

bugzilla.redhat.com

cloudbees.com

wiki.jenkins-ci.org