We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent d770406 commit 7173e7fCopy full SHA for 7173e7f
modules/exploits/multi/http/jenkins_xstream_deserialize.rb
@@ -14,7 +14,7 @@ def initialize(info = {})
14
super(update_info(info,
15
'Name' => 'Jenkins XStream Groovy classpath Deserialization Vulnerability',
16
'Description' => %q{
17
- This module exploits a vulnerability in Jenkins versions older than 1.650 and Jenkins LTS versions
+ This module exploits CVE-2016-0792 a vulnerability in Jenkins versions older than 1.650 and Jenkins LTS versions
18
older than 1.642.2 which is caused by unsafe deserialization in XStream with Groovy in the classpath,
19
which allows remote arbitrary code execution. The issue affects default installations. Authentication
20
is not required to exploit the vulnerability.
0 commit comments