CVE-2018-1000861CISA KEV: Actively Exploited

Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability

Published Feb 10, 2022·Updated Feb 10, 2022

Description

A code execution vulnerability exists in the Stapler web framework used by Jenkins

Public Exploits & PoCs2 found

PoC: CVE-2019-1003000_RCE-DETECTION

A C# module to detect if a Jenkins server is vulnerable to the RCE vulnerability found in CVE-2019-1003000 (chained with CVE-2018-1000861 for pre-auth RCE)

PoC: CVE-2018-1000861

CVE-2018-1000861 Exploit

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free