Description

Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code.

Remediation

References

CVE-2012-4438

Related Vulnerabilities

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4287)

WordPress Plugin Easy Pixels Unspecified Vulnerability (1.8.2)

WordPress Plugin Ultimate Profile Builder By CMSHelpLive Multiple Vulnerabilities (2.3.3)

WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (2.23.2)

WordPress Plugin WP Activity Log Security Bypass (4.0.1)

Severity

High

Classification

CVE-2012-4438 CWE-20 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities