{"id":"CVE-2024-23898","published":"2024-01-24T17:52:23Z","modified":"2025-06-20T19:28:50Z","title":"Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin…","vendor":"Jenkins Project","product":"Jenkins","tier":"core","eol":null,"affectedVersions":[{"vendor":"Jenkins Project","product":"Jenkins","versions":["all versions"]}],"description":{"text":"Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking (CSWSH) vulnerability, allowing attackers to execute CLI commands on the Jenkins controller.","provenance":"source","from":"CVE.org"},"summary":{"text":"The Jenkins CLI WebSocket endpoint in Jenkins 2.217 through 2.441 and LTS 2.222.1 through 2.426.2 does not validate the origin of incoming requests, creating a cross-site WebSocket hijacking flaw. An attacker can use it to execute CLI commands on the Jenkins controller by luring a logged-in user to a malicious web page, with no prior authentication required but user interaction needed.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:12:26Z"},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.67151,"percentile":0.99298,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":1,"pulses":[{"name":"ACTUALIZACION | Oracle Critical Patch Update Advisory - July 2024","url":"https://otx.alienvault.com/pulse/66a1221a4c2d00084ba3bcba","created":"2024-07-24"}],"provenance":"machine"},"cwes":[{"id":"CWE-346","name":"Origin Validation Error"}],"references":[{"url":"https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3315","tags":["vendor-advisory"]},{"url":"https://www.sonarsource.com/blog/excessive-expansion-uncovering-critical-security-vulnerabilities-in-jenkins/","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/24/6","tags":[]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Maven","package":"org.jenkins-ci.main:jenkins-core","vulnerableRanges":[">=2.217, <2.426.3",">=2.427, <2.442"],"patched":["2.426.3","2.442"],"from":["GHSA-53ph-2r2x-vqw8"],"provenance":"source"}],"advisories":[{"id":"GHSA-53ph-2r2x-vqw8","url":"https://github.com/advisories/GHSA-53ph-2r2x-vqw8","severity":"HIGH","ecosystem":"Maven","package":"org.jenkins-ci.main:jenkins-core","vulnerableRanges":[">=2.217, <2.426.3"],"patched":["2.426.3"],"provenance":"source","from":"GHSA"},{"id":"GHSA-53ph-2r2x-vqw8","url":"https://github.com/advisories/GHSA-53ph-2r2x-vqw8","severity":"HIGH","ecosystem":"Maven","package":"org.jenkins-ci.main:jenkins-core","vulnerableRanges":[">=2.427, <2.442"],"patched":["2.442"],"provenance":"source","from":"GHSA"},{"id":"GHSA-53ph-2r2x-vqw8","url":"https://github.com/advisories/GHSA-53ph-2r2x-vqw8","severity":"HIGH","ecosystem":"Maven","package":"org.jenkins-ci.main:jenkins-core","vulnerableRanges":[],"patched":[],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2024-0256","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-0256","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2024-11-14","earliestUrl":"https://github.com/davidmgaviria/CVE2_Jenkins_RCE","repos":[{"name":"davidmgaviria/CVE2_Jenkins_RCE","url":"https://github.com/davidmgaviria/CVE2_Jenkins_RCE","stars":2,"created":"2024-11-14"}]},"first":{"date":"2024-11-14","source":"PoC-in-GitHub","url":"https://github.com/davidmgaviria/CVE2_Jenkins_RCE"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2024-01-24","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-23898","provenance":"source"},{"date":"2024-11-14","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/davidmgaviria/CVE2_Jenkins_RCE","provenance":"source"}],"speed":{"daysToPublicExploit":295,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":31.7,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.86,"detail":"percentile 0.9930"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 PoC-in-GitHub repo"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":6.16,"detail":"base score 8.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"packageHistory":[{"cve":"CVE-2023-43497","published":"2023-09-20","fixed":"2.424","kev":false},{"cve":"CVE-2023-43498","published":"2023-09-20","fixed":"2.424","kev":false},{"cve":"CVE-2024-23897","published":"2024-01-24","fixed":"2.442","kev":true,"link":{"from":"CVE-2024-23897","to":"CVE-2024-23898","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.jenkins-ci.main:jenkins-core","fromFixed":"2.440.1","toFixed":"2.442","daysApart":0}]}},{"cve":"CVE-2024-23898","published":"2024-01-24","fixed":"2.442","kev":false},{"cve":"CVE-2024-43044","published":"2024-08-07","fixed":"2.471","kev":false},{"cve":"CVE-2024-43045","published":"2024-08-07","fixed":"2.471","kev":false},{"cve":"CVE-2024-47803","published":"2024-10-02","fixed":"2.479","kev":false}],"package":"Maven:org.jenkins-ci.main:jenkins-core"}}