~ / search / GHSA-8qpf-fv36-h4r8

GHSA-8qpf-fv36-h4r8

Infinite Loop in Jenkins Core

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-1999044

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.main:jenkins-core < 2.138 2.138

Details

As written in the advisory (Markdown source, shown as plain text).

A Cron expression form validation could enter infinite loop, potentially resulting in denial of service. The form validation for cron expressions (e.g. "Poll SCM", "Build periodically") could enter infinite loops when cron expressions only matching certain rare dates were entered, blocking request handling threads indefinitely.

References

External links from the advisory. They lead to third-party sites.