GHSA-25c5-58xw-hw5q

Jenkins allows Remote Users to Build Arbitrary Jobs

At a glance

Published: 2022-05-05
Updated: 2025-03-13
CVE: CVE-2013-0330
CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Description

Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to build arbitrary jobs via unknown attack vectors.

Affected packages

Package	Versions
Maven · org.jenkins-ci.main:jenkins-core	introduced 1.481, fixed 1.502
Maven · org.jenkins-ci.main:jenkins-core	introduced 0, fixed 1.480.3

References

https://nvd.nist.gov/vuln/detail/CVE-2013-0330 ADVISORY
https://bugzilla.redhat.com/show_bug.cgi?id=914878 WEB
https://github.com/jenkinsci/jenkins PACKAGE
https://web.archive.org/web/20200229023853/http://www.securityfocus.com/bid/57994 WEB
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16 WEB
http://rhn.redhat.com/errata/RHSA-2013-0638.html WEB
http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb WEB
http://www.openwall.com/lists/oss-security/2013/02/21/7 WEB

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — GitHub Advisory Database