writeups.xyz / Analysis of CVE-2024-43044 — From file read to RCE in Jenkins through agents

Submitter : c2a

Date: 29 August 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• Arbitrary File Read

Programs :

• Jenkins

Authors :

• Gabriel Quadros (@Gqsilva)
• Ricardo Silva (@Rick2600)

Link :
https://blog.convisoappsec.com/en/analysis-of-cve-2024-43044/