VDB
CVE-2025-59476
CVE-2025-59476
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be inserted from user-specified content in log messages, allowing attackers able to control log message contents to insert line break characters, followed by forged log messages that may mislead administrators reviewing log output.
EPSS 0.36% · 28.6th percentile
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS Score
0.36%
28.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | jenkins | 0, 2.517.0 |
| Bitnami | jenkins | 0, 2.517.0 |
Timeline
- Sep 17, 2025 CVE Published
- Sep 17, 2025 PoC Published
- Sep 18, 2025 EPSS Score
- Sep 26, 2025 EPSS Score
- Oct 4, 2025 EPSS Score
- Oct 11, 2025 EPSS Score
- Oct 19, 2025 EPSS Score
- Oct 27, 2025 EPSS Score
- Nov 4, 2025 EPSS Score
- Nov 5, 2025 CVE Updated
- Nov 11, 2025 EPSS Score
- Nov 19, 2025 EPSS Score