Vulnerabilitycritical

Jenkins patched a critical RCE flaw in its open source automation server

Security Affairsby @securityaffairsOct 4, 2025 · 15:37 UTC (Oct 4, 2025)2 min read3 · 1 read

Read at securityaffairs.com

Analyze CVE-2017-1000353 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2017-1000353 CVE-2017-1000354 CVE-2017-1000355

Tags: cve-2017-1000353 cve-2017-1000354 cve-2017-1000355 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-1000353 +2 related CVEs CVE-2017-1000354 CVE-2017-1000355	Unauthenticated Deserialization RCE in Jenkins CLI (≤2.56 / ≤2.46.1 LTS)	9.8 group max	100%	KEVPoC	Jan 29, 2018 KEV Oct 2, 2025

From the original article

2 min read at securityaffairs.com

Jenkins developers fixed a critical RCE vulnerability in the popular open source automation server along with many other issues. Jenkins is the most popular open source automation server, it is maintained by CloudBees and the Jenkins community. The automation server supports developers build, test and deploy their applications, it has more than 133,000 active installations worldwide with more than 1 million users.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.