Improper control of interaction frequency In org.jenkins-ci.main:cli
Description
Jenkins has a Denial of service vulnerability in HTTP-based CLI Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 2.541, 2.528.3 | ||
maven | 2.541, 2.528.3 |
Aliases
1. 2. 3. 4.
References
1. 2. 3.