Skip to content

Commit 7173e7f

Browse files
committed
Add CVE to module description
1 parent d770406 commit 7173e7f

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

modules/exploits/multi/http/jenkins_xstream_deserialize.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ def initialize(info = {})
1414
super(update_info(info,
1515
'Name' => 'Jenkins XStream Groovy classpath Deserialization Vulnerability',
1616
'Description' => %q{
17-
This module exploits a vulnerability in Jenkins versions older than 1.650 and Jenkins LTS versions
17+
This module exploits CVE-2016-0792 a vulnerability in Jenkins versions older than 1.650 and Jenkins LTS versions
1818
older than 1.642.2 which is caused by unsafe deserialization in XStream with Groovy in the classpath,
1919
which allows remote arbitrary code execution. The issue affects default installations. Authentication
2020
is not required to exploit the vulnerability.

0 commit comments

Comments
 (0)