Description
Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and allow unconstrained resource usage.
Remediation
References
Related Vulnerabilities
WordPress Plugin Contact Form 7 Privilege Escalation (5.0.3)
MySQL CVE-2022-21307 Vulnerability (CVE-2022-21307)
WordPress Plugin Rich Reviews Cross-Site Scripting (1.7.4)
WordPress Plugin Phoenix Media Rename Security Bypass (3.4.2)
ClipBucket Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-7665)