Lack of data validation In org.jenkins-ci.main:jenkins-core
Description
Jenkins Vulnerable to Denial of Service (DoS) Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users to cause a denial of service (improper plug-in and tool installation) via crafted update center data.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 1.600, 1.596.1 |
Aliases
1. 2. 3. 4. 5.
References
1. 2. 3.