CVE-2016-0789 in Jenkins

摘要

由 MITRE

CRLF injection vulnerability in the CLI command documentation in CloudBees Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Once again VulDB remains the best source for vulnerability data.

• 预定: 2015-12-16
• 披露: 2016-04-07
• 管理: 已接受
• 条目: VDB-81698
• CPE: 准备好
• CWE: CWE-20 (已确认)
• CVSS: 6.1 (NVD)
• EPSS: 0.01790
• KEV: 否
• 活动: 非常低
• 部门: Chemical, Hostingprovider, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0789
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0789
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0789/