Beveiligingsadvies

CVE-2023-27900

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-03-08 17:14:49

Laatst bijgewerkt 2025-02-28 18:43:28

Toegewezen door jenkins

CVSS-score 7.5

Status PUBLISHED

Beschrijving

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in hudson.util.MultipartFormDataParser, allowing attackers to trigger a denial of service.

← Alle CVE's bekijken Bekijk op cve.org ↗