Safeguard
Tag

jenkins

Safeguard articles tagged "jenkins" — guides, analysis, and best practices for software supply chain and application security.

20 articles

Vulnerability Analysis

CVE-2018-1000861: Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability

CVE-2018-1000861 affects Jenkins Jenkins Stapler Web Framework and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-02-10.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2019-1003030: Jenkins Matrix Project Plugin Remote Code Execution Vulnerability

CVE-2019-1003030 affects Jenkins Matrix Project Plugin and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-03-25.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2019-1003029: Jenkins Script Security Plugin Sandbox Bypass Vulnerability

CVE-2019-1003029 affects Jenkins Script Security Plugin and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-04-25.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2015-5317: Jenkins User Interface (UI) Information Disclosure Vulnerability

CVE-2015-5317 affects Jenkins Jenkins User Interface (UI) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-05-12.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2024-23897: Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

CVE-2024-23897 affects Jenkins Jenkins Command Line Interface (CLI) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-08-19.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2017-1000353: Jenkins Remote Code Execution Vulnerability

CVE-2017-1000353 affects Jenkins Jenkins and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-10-02.

Sep 17, 20263 min read
DevSecOps

Jenkins CLI Java Deserialization Remote Code Execution (C...

CVE-2017-1000353 let attackers gain unauthenticated RCE on Jenkins via CLI Java deserialization. Here's the impact, timeline, and how to remediate it.

Jul 25, 20268 min read
DevSecOps

Jenkins Remote Code Execution via Groovy Metaclass (CVE-2...

CVE-2016-0792 let attackers bypass Jenkins' deserialization blacklist using Groovy's metaclass to achieve unauthenticated remote code execution via the CLI.

Jul 25, 20269 min read
DevSecOps

Jenkins CLI Deserialization RCE via Commons-Collections G...

CVE-2015-8103: unauthenticated RCE in Jenkins CLI via a Commons-Collections deserialization gadget chain. Impact, timeline, and remediation.

Jul 25, 20269 min read
DevSecOps

Jenkins Script Security Sandbox Bypass Leading to RCE (CV...

CVE-2019-1003029 let attackers escape the Jenkins Script Security sandbox and execute arbitrary code via crafted Groovy pipeline scripts.

Jul 25, 20268 min read
DevSecOps

Jenkins Arbitrary File Read via Crafted CLI Command (CVE-...

CVE-2018-1999002 let attackers read arbitrary files from Jenkins masters via crafted requests to the Stapler framework, exposing secrets and credentials.

Jul 25, 20268 min read
Vulnerability Analysis

Jenkins CLI Arbitrary File Read (CVE-2024-23897) Explained

CVE-2024-23897 turned a convenience feature in Jenkins' CLI argument parser into an arbitrary file read that can escalate to full RCE. Here's the mechanism and the fix.

Jul 6, 20265 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.