CVE-2023-27901 — Vulnetix

Try Vulnetix Request Demo

CVE-2023-27901 PUBLISHED

Jenkins LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in org.kohsuke.stapler.RequestImpl, allowing attackers to trigger a denial of service.

EPSS 0.54% · 67.3th percentile

Risk Scores

EPSS Score

0.54%

67.3th percentile

Affected Products

Vendor	Product	Versions
Bitnami	jenkins	0
Bitnami	jenkins	0

Timeline

Mar 8, 2023 CVE Published
Mar 9, 2023 EPSS Score
Mar 11, 2023 PoC Published
Apr 16, 2023 EPSS Score
May 25, 2023 EPSS Score
Jul 2, 2023 EPSS Score
Aug 9, 2023 EPSS Score
Sep 17, 2023 EPSS Score
Oct 25, 2023 EPSS Score
Dec 2, 2023 EPSS Score
Feb 17, 2024 EPSS Score
Mar 26, 2024 EPSS Score

References

Open in Interactive Console →