GitHub Advisoryadvisory · Maven

GHSA-5c56-g5cq-4gj9 Jenkins Vulnerable to Denial of Service (DoS) via Crafted Payload

MEDIUM Published 2022-05-05 Modified 2025-03-13 Official page ↗

Aliases: CVE-2013-0331
Ecosystem: Maven
Packages: org.jenkins-ci.main:jenkins-core
Severity: Moderate
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Weaknesses: CWE-20
Reviewed: 2025-03-13

Affected packages

• Maven org.jenkins-ci.main:jenkins-core: >= 1.481, < 1.502 → fixed in 1.502 • Maven org.jenkins-ci.main:jenkins-core: < 1.480.3 → fixed in 1.480.3

Description

Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to cause a denial of service via a crafted payload.

Related

Alias · CVE (1)

CVE-2013-0331 Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to cause a denial of service via a crafted… vulnerability

Weakness · CWE (1)

CWE-20 Improper Input Validation weakness

References