GitHub Advisoryadvisory · Maven

GHSA-25c5-58xw-hw5q Jenkins allows Remote Users to Build Arbitrary Jobs

MEDIUM Published 2022-05-05 Modified 2025-03-13 Official page ↗
Aliases
CVE-2013-0330
Ecosystem
Maven
Packages
org.jenkins-ci.main:jenkins-core
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-284
Reviewed
2025-03-13

Affected packages

• Maven org.jenkins-ci.main:jenkins-core: >= 1.481, < 1.502 → fixed in 1.502 • Maven org.jenkins-ci.main:jenkins-core: < 1.480.3 → fixed in 1.480.3

Description

Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to build arbitrary jobs via unknown attack vectors.

Related

Alias · CVE (1)

  • CVE-2013-0330 Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to build… vulnerability

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References