VDB
CVE-2025-59476
CVE-2025-59476
PUBLISHED
Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be inserted from user-specified content in log messages, allowing attackers able to control log message contents to insert line break characters, followed by forged log messages that may mislead administrators reviewing log output.
EPSS 0.10% · 28.1th percentile
Risk Scores
EPSS Score
0.10%
28.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | jenkins | 0, 2.517.0 |
| Bitnami | jenkins | 0, 2.517.0 |
Exploit Intelligence
- CIRCL seen: CVE-2025-59476 (circl-sighting)
- http://www.openwall.com/lists/oss-security/2025/09/17/1 (circl)
- Jenkins Security Advisory 2025-09-17 (circl)
Timeline
- Sep 17, 2025 CVE Published
- Sep 17, 2025 PoC Published
- Sep 18, 2025 EPSS Score
- Sep 25, 2025 EPSS Score
- Oct 2, 2025 EPSS Score
- Oct 9, 2025 EPSS Score
- Oct 16, 2025 EPSS Score
- Oct 23, 2025 EPSS Score
- Oct 30, 2025 EPSS Score
- Nov 5, 2025 CVE Updated
- Nov 6, 2025 EPSS Score
- Nov 13, 2025 EPSS Score