CVE-2018-1000861
Jenkins Jenkins Stapler Web Framework
Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
What it is
A code execution vulnerability exists in the Stapler web framework used by Jenkins
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Jenkins entries on the list
- Jenkins Jenkins Remote Code Execution Vulnerability CVE-2017-1000353 · Oct 2, 2025
- Jenkins Command Line Interface (CLI) Jenkins Command Line Interface (CLI) Path Traversal Vulnerability CVE-2024-23897 · Aug 19, 2024
- Jenkins User Interface (UI) Jenkins User Interface (UI) Information Disclosure Vulnerability CVE-2015-5317 · May 12, 2023
- Script Security Plugin Jenkins Script Security Plugin Sandbox Bypass Vulnerability CVE-2019-1003029 · Apr 25, 2022
- Matrix Project Plugin Jenkins Matrix Project Plugin Remote Code Execution Vulnerability CVE-2019-1003030 · Mar 25, 2022