PT-2018-7134
CVE-2017-2608
·
Published
2018-05-15
·
Updated
2022-05-13
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Jenkins versions prior to 2.44
Jenkins versions prior to 2.32.2
Description:
The issue involves a remote code execution vulnerability through the deserialization of various types in javax.imageio in XStream-based APIs.
Recommendations:
For versions prior to 2.44, update to version 2.44 or later.
For versions prior to 2.32.2, update to version 2.32.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾