Skip to content

Add Jenkins CVE-2024-23897 (CLI arbitrary file read) - #675

Open
60secAgo wants to merge 2 commits into
gunh0:mainfrom
60secAgo:main
Open

Add Jenkins CVE-2024-23897 (CLI arbitrary file read)#675
60secAgo wants to merge 2 commits into
gunh0:mainfrom
60secAgo:main

Conversation

@60secAgo

Copy link
Copy Markdown

CVE-2024-23897 β€” Jenkins CLI μž„μ˜ 파일 읽기

  • μ·¨μ•½ 버전: jenkins/jenkins:2.426.2-lts-jdk17 (ν•€ κ³ μ •)
  • docker compose up -d --build ν•œ μ€„λ‘œ ν™˜κ²½ μ™„μ„±
  • poc.sh μ‹€ν–‰μœΌλ‘œ /etc/passwd 유좜 μž¬ν˜„ 확인
  • VMware ν™˜κ²½μ—μ„œ μž¬ν˜„ 검증 μ™„λ£Œ
  • Risk Score: 9.8 (Critical)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant