Article: Jenkins - messing with exploits pt3 - CVE-2019-1003000 - published over 5 years ago. Content: References: https://www.exploit-db.com/exploits/46453 http://blog.orange.tw/2019/02/abusing-meta-programming-for-unauthenticated-rce.html This post covers the Orange Tsai Jenkins pre-auth exploit Vuln versions: Jenkins < 2.137 (preauth) Pipeline: Declarative Plugin up to and including 1.3.4 Pipeline: Groovy Plugin up to and including 2.61 Script Secur... https://blog.carnal0wnage.com/2019/03/jenkins-messing-with-exploits-pt3-cve.html Published: 2019 03 05 03:26:00 Received: 2024 02 19 11:44:44 Feed: Carnal0wnage and Attack Research Blog Source: Carnal0wnage and Attack Research Blog Category: News Topic: Hacking |
Click to Open Code Editor