CVE-2024-23897
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system.
- Jenkins
- < 2.426.3, 2.442
- Fix
- Available
- CVSS 3.1
- 9.8 CRITICAL
- EPSS
- 100.0% (100th percentile)
- Weakness
- CWE-22, CWE-27
- NVD status
- Analyzed
- Published
- 2024-01-24
CVE-2024-23897 at NVD
50 known exploits for CVE-2024-23897
Proof-of-concept code and exploit modules indexed by Sploitus
CVE-CICD-Security
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
cve-research-agent
Exploit for Path Traversal in Jenkins
Exploit for OS Command Injection in Gnu Bash
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
📄 Jenkins 2.441 Arbitrary File Read
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Jenkins cli Ampersand Replacement Arbitrary File Read
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Jenkins 2.441 - Local File Inclusion
Jenkins 2.441 Local File Inclusion
CVE-2024-23897 - Jenkins <= 2.441 & <= LTS 2.426.2 PoC And Scanner
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Jenkins 2.441 / LTS 2.426.3 Arbitrary File Read Exploit
Jenkins 2.441 / LTS 2.426.3 Arbitrary File Read
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
Exploit for Path Traversal in Jenkins
CVE-2024-23897
Jenkins cli Ampersand Replacement Arbitrary File Read