GHSA-wr6p-j63r-xqhv
GitHub Security Advisory
Jenkins allows Data Insertion and Execution of Code by those with Read and HTTP Access
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code.
Affected Packages
Maven
org.jenkins-ci.main:jenkins-core
Affected versions:
0
(fixed in 1.466.2)
Maven
org.jenkins-ci.main:jenkins-core
Affected versions:
1.467
(fixed in 1.482)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: July 6, 2025 6:30 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.