CVE-2025-59476 in Jenkinsinformación

Resumen

por MITRE • 2025-09-17

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be inserted from user-specified content in log messages, allowing attackers able to control log message contents to insert line break characters, followed by forged log messages that may mislead administrators reviewing log output.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Jenkins

Reservar

2025-09-16

Divulgación

2025-09-17

Moderación

aceptado

Artículo

VDB-324668

CPE

listo

EPSS

0.00335

KEV

no

Actividades

muy bajo

Sector

Telecommunication, Finance, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-59476
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-59476
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-59476/

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!