Description

Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack."

Remediation

References

CVE-2012-0785

Related Vulnerabilities

PHP Other Vulnerability (CVE-2000-0860)

WordPress Plugin MasterStudy LMS-for Online Courses and Education Local File Inclusion (3.3.0)

MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-3579)

Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4558)

WordPress Plugin Conditional Marketing Mailer for WooCommerce Security Bypass (1.5.1)

Severity

High

Classification

CVE-2012-0785 CWE-400 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities