Sploitus

Exploit for CVE-2019-10392

kitploit · 2026-08-28

Exploit Code

MARKDOWN27 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JAS502N-CVE-2019-10392
# CVE-2019-10392 RCE avec Git Client Plugin 2.8.2 (Authentifié)

![](https://assets.kitploit.com/production/public/readmes/27331/81a7cea9cd60a8662c518174636b6f826637fa6e0cbb33c1898636e116d6fb92.jpg) ![](https://assets.kitploit.com/production/public/readmes/27331/66da832da41a67733058646ce55065e1da2538fcfd4f4a8b5479ad32b01a26ff.jpg) ![](https://assets.kitploit.com/production/public/readmes/27331/97543e1af178bdacfe417ab6f57f9243e82024984572374af99a563e6443141a.jpg) ![](https://assets.kitploit.com/production/public/readmes/27331/8967e8c02e46699f83057f88eda542f5fbbfd04748f11a7c2ebe643680572cdb.jpg)

## 0x01 Démarrage docker

`docker run -p 8080:8080 -p 50000:50000 jenkins/jenkins:lts-alpine`

## 0x02 Environnement de vulnérabilité

root@kitploit:~
    
    
    Jenkins 2.176.3
    Git Client Plugin 2.8.2 
    
    https://updates.jenkins-ci.org/download/plugins/git-client/
    Git Plugin 3.12.0
    
    

## Liens de référence

https://iwantmore.pizza/posts/cve-2019-10392.html

https://devco.re/blog/2019/01/16/hacking-Jenkins-part1-play-with-dynamic-routing/