Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-08-10. Apply updates per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
🔴 تنبيه أمني: CVE-2018-1000861 في Jenkins Stapler Web Framework. ثغرة مُستغلة فعلياً ومدرجة في قائمة CISA KEV. يُنصح بتطبيق التحديثات الأمنية فوراً. #الأمن_السيبراني #CVE_2018_1000861 https://nvd.nist.gov/vuln/detail/CVE-2018-1000861
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jenkins | jenkins | - | - | - |
| App | jenkins | jenkins | - | - | - |
| App | redhat | openshift_container_platform | 3.11 | - | - |