CVE-2018-1000189

—

CVSS 3.0

8.8 high

EPSS

2%p80

Published

Jun 5, 2018 (Jun 5, 2018)

Modified

Jun 17, 2026

Description

A command execution vulnerability exists in Jenkins Absint Astree Plugin 1.0.5 and older in AstreeBuilder.java that allows attackers with Overall/Read access to execute a command on the Jenkins master.

Vendors: jenkins
Products: absint astree
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.