CVE-2024-23897Used in ransomware
Jenkins Jenkins Command Line Interface (CLI)
Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
What it is
Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Jenkins entries on the list
- Jenkins Jenkins Remote Code Execution Vulnerability CVE-2017-1000353 · Oct 2, 2025
- Jenkins User Interface (UI) Jenkins User Interface (UI) Information Disclosure Vulnerability CVE-2015-5317 · May 12, 2023
- Script Security Plugin Jenkins Script Security Plugin Sandbox Bypass Vulnerability CVE-2019-1003029 · Apr 25, 2022
- Matrix Project Plugin Jenkins Matrix Project Plugin Remote Code Execution Vulnerability CVE-2019-1003030 · Mar 25, 2022
- Jenkins Stapler Web Framework Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability CVE-2018-1000861 · Feb 10, 2022