CVE-2025-59476 in Jenkinsinformazioni

Riassunto

di MITRE • 17/09/2025

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be inserted from user-specified content in log messages, allowing attackers able to control log message contents to insert line break characters, followed by forged log messages that may mislead administrators reviewing log output.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

Jenkins

Prenotare

16/09/2025

Divulgazione

17/09/2025

Moderazione

accettato

CPE

pronto

EPSS

0.00335

KEV

no

Attività

molto basso

Settore

Chemical, Hostingprovider, ...

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-59476
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-59476
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-59476/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!