jenkinsci-cert/SECURITY-3430

PoC

This repository provides a workaround preventing exploitation of SECURITY-3430 / CVE-2024-43044

view exploit source poc_in_githubauthor jenkinsci-certpublished 2024-08-08catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-43044US	high8.8	28.8% (98th)	Exploit	2024-08-07
Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the `ClassLoaderProxy#fetchJar` m…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.