BIT-JENKINS-2024-23897

Exploit Intelligence

• Self-contained Docker reproduction and analysis of CVE-2024-23897, the Jenkins CLI arbitrary file read via the args4j @-syntax argument expansion. (github-poc-repo)
• Self-contained Docker reproduction and analysis of CVE-2024-23897, the Jenkins CLI arbitrary file read via the args4j @-syntax argument expansion. (github-poc)
• Jenkins RCE Arbitrary File Read CVE-2024-23897 (github-poc-repo)
• Jenkins CLI arbitrary read (CVE-2024-23897 applies to versions below 2.442 and LTS 2.426.3) (github-poc-repo)
• brandonhjh/Jenkins-CVE-2024-23897-Exploit-Demo (github-poc-repo)
• Poc para explotar la vulnerabilidad CVE-2024-23897 en versiones 2.441 y anteriores de Jenkins, mediante la cual podremos leer archivos internos del sistema sin estar autenticados (github-poc-repo)
• Fineken/Jenkins-CVE-2024-23897-Lab (github-poc-repo)
• Jenkins CLI arbitrary file read (CVE-2024-23897) (github-poc-repo)
• hybinn/CVE-2024-23897 (github-poc-repo)
• aadi0258/Exploit-CVE-2024-23897 (github-poc-repo)

…and 62 more exploits

Timeline

• Mar 6, 2024 CVE Published