VDB

CVE-2022-0538

CVE-2022-0538 PUBLISHED

Jenkins LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and allow unconstrained resource usage.

EPSS 0.50% · 66.1th percentile

Risk Scores

EPSS Score
0.50%
66.1th percentile

Affected Products

VendorProductVersions
Bitnamijenkins0
Bitnamijenkins0

Timeline

  • Feb 9, 2022 CVE Published
  • Feb 10, 2022 EPSS Score
  • Apr 3, 2022 EPSS Score
  • May 26, 2022 EPSS Score
  • Sep 8, 2022 EPSS Score
  • Oct 31, 2022 EPSS Score
  • Dec 22, 2022 EPSS Score
  • Feb 12, 2023 EPSS Score
  • Apr 5, 2023 EPSS Score
  • May 28, 2023 EPSS Score
  • Jul 19, 2023 EPSS Score
  • Sep 9, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›