Exploit for Path Traversal in Jenkins

githubexploit · 2024-11-11

Description

Jenkins vulnerability allows file reading

Affected Jenkins versions

Jenkins< 2.426.3, 2.442

All known vulnerabilities by product

CVSS 9.8 for CVE-2024-23897

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 18 file(s) in the source

EPSS Score

100.0%higher than 100.0% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2024-11-18 03:29

Last Seen:2025-08-31 22:21

Reporter:safeer-accuknox

Written in:Python

Last commit:2024-11-18

Tags

path traversaljenkinsCVE-2024-23897

Other exploits for CVE-2024-23897

CVE-CICD-Security

2026-08-13 chengbochuan3GITHUB

Exploit for Path Traversal in Jenkins

2026-07-24 razureinkGITHUB

Exploit for Path Traversal in Jenkins

2026-07-20 DungsocoolGITHUB

cve-research-agent

2026-06-24 av4nth1kaGITHUB

Exploit for Path Traversal in Jenkins

2026-04-23 w41l3rGITHUB

Exploit for OS Command Injection in Gnu Bash

2026-04-01 Phantom-C2-77GITHUB

Exploit for Path Traversal in Jenkins

2026-03-03 vmc8llGITHUB

Exploit for Path Traversal in Jenkins

2026-01-18 wvverezGITHUB

Exploit Code

README4 lines

## https://sploitus.com/exploit?id=DE2E0AD9-C156-5E8F-A2E7-D84B6BE92618
## README

You can view the original repository [here](https://github.com/kozmer/log4j-shell-poc) for more details.