CVE-2022-0538

 

Published at: - 09-02-2022 03:15

Last modified: - 11-02-2022 09:44

Total changes: - 2

Description

Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and allow unconstrained resource usage.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://www.jenkins.io/security/advisory/2022-02-09/#SECURITY-2602
• [oss-security] 20220209 Vulnerability in Jenkins-Mailing List, Third Party Advisory

 

Keywords

NVD

 

CVE-2022-0538

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures