~ / search / GHSA-f7f6-xrwc-9c57

GHSA-f7f6-xrwc-9c57

Improper Input Validation in Jenkins

Source: GitHub Advisory Database (reviewed) High CVE-2017-1000394

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.main:jenkins-core < 2.73.2 2.73.2
Maven org.jenkins-ci.main:jenkins-core >= 2.74, < 2.84 2.84

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-fileupload library with the denial-of-service vulnerability known as CVE-2016-3092. The fix for that vulnerability has been backported to the version of the library bundled with Jenkins.

References

External links from the advisory. They lead to third-party sites.