pentester.land· Jan 25, 2024· by Yaniv Nizry (@YNizry)🔍 CVE-2024-23897

Excessive Expansion: Uncovering Critical Security Vulnerabilities in Jenkins (CVE-2024-23897 & CVE-2024-23898)

Open Original Article ↗
Target Program: Jenkins
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Cross-Site WebSocket Hijacking (CSWH)#Data leak#Arbitrary file read#Security code review#CVE-2024-23897#CVE-2024-23898