EDB-43375
functionalJenkins - XStream Groovy classpath Deserialization (Metasploit)
view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2017-12-19catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-0792US | high8.8 | Exploit | ||
Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, rel… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan