GitHub Advisoryadvisory · Maven
GHSA-h5jv-hg68-mjhg Jenkins allows attackers to configure restricted projects
MEDIUM
Official page ↗
- Aliases
- CVE-2013-7330
- Ecosystem
- Maven
- Packages
- org.jenkins-ci.main:jenkins-core
- Severity
- Moderate
- Reviewed
- 2024-03-06
Affected packages
• Maven org.jenkins-ci.main:jenkins-core: >= 1.481, < 1.502 → fixed in 1.502
• Maven org.jenkins-ci.main:jenkins-core: < 1.480.3 → fixed in 1.480.3
Description
Jenkins before 1.502 allows remote authenticated users to configure an otherwise restricted project via vectors related to post-build actions.
Related
Alias · CVE (1)
- CVE-2013-7330 Jenkins before 1.502 allows remote authenticated users to configure an otherwise restricted project via vectors related to post-build… vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2013-7330 advisory
- https://github.com/jenkinsci/jenkins/commit/36342d71e29e0620f803a7470ce96c61761648d8 web
- https://github.com/jenkinsci/jenkins/commit/757bc8a53956e6fbab267214e6e0896f03c3c262 web
- https://github.com/jenkinsci/jenkins package
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14 web
- http://www.openwall.com/lists/oss-security/2014/02/21/2 web