Firetruck

CVE-2018-1000861

KEV

Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability

View CVE record →
Vendor / Project
Jenkins
Product
Jenkins Stapler Web Framework
Date added
Feb 10, 2022
Due date
Aug 10, 2022
Known ransomware use
Unknown
CWEs
CWE-502

Description

A code execution vulnerability exists in the Stapler web framework used by Jenkins

Required action

Apply updates per vendor instructions.

Notes