Known Exploited Vulnerabilities October 02, 2025 · CISA KEV Catalog

CVE-2017-1000353: Jenkins Remote Code Execution Vulnerability

Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based protection mechanism.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2017-1000353Jenkins

Related

CVE-2024-23897: Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Known Exploited Vulnerabilities · Aug 19, 2024

CVE-2015-5317: Jenkins User Interface (UI) Information Disclosure Vulnerability Known Exploited Vulnerabilities · May 12, 2023

CVE-2019-1003029: Jenkins Script Security Plugin Sandbox Bypass Vulnerability Known Exploited Vulnerabilities · Apr 25, 2022