CVE-2024-43044

—

CVSS 3.1

8.8 high

EPSS

29%p98

Published

Aug 7, 2024 (Aug 7, 2024)

Modified

Jun 17, 2026

Description

Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the `ClassLoaderProxy#fetchJar` method in the Remoting library.

Vendors: jenkins
Products: jenkins
Weakness: CWE-754
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (28.8%)

In the news0 stories

No ingested article mentions this CVE yet.