Hacking News Jenkins Security Alert: New Security Flaws Could Allow Code Execution Attacks - Printable Version

+- (https://hackmyride.com/forum)
+-- Forum: Automotive Hacking (https://hackmyride.com/forum/forumdisplay.php?fid=211)
+--- Forum: News (https://hackmyride.com/forum/forumdisplay.php?fid=278)
+---- Forum: The Hacker News (https://hackmyride.com/forum/forumdisplay.php?fid=279)
+---- Thread: Hacking News Jenkins Security Alert: New Security Flaws Could Allow Code Execution Attacks (/showthread.php?tid=1055)



Jenkins Security Alert: New Security Flaws Could Allow Code Execution Attacks - The Hacker News - 03-09-2023

Jenkins Security Alert: New Security Flaws Could Allow Code Execution Attacks

A pair of severe security vulnerabilities have been disclosed in the Jenkins open source automation server that could lead to code execution on targeted systems.
The flaws, tracked as CVE-2023-27898 and CVE-2023-27905, impact the Jenkins server and Update Center, and have been collectively christened CorePlague by cloud security firm Aqua. All versions of Jenkins versions prior to 2.319.2 are

https://thehackernews.com/2023/03/jenkins-security-alert-new-security.html