jas502n/CVE-2019-10392

PoC

CVE-2019-10392 RCE Jackson with Git Client Plugin 2.8.2 (Authenticated)

view exploit source poc_in_githubauthor jas502npublished 2019-09-26catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-10392US	high8.8	26.2% (98th)	Exploit	2019-09-12
Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command inject…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.