writeups.xyz / CorePlague: Severe Vulnerabilities in Jenkins Server Lead to RCE

Submitter : c2a

Date: 8 March 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• XSS
• Security Code Review

Programs :

• Jenkins

Authors :

• Ilay Goldman (@GoldmanIlay)
• Yakir Kadkoda

Link :
https://blog.aquasec.com/jenkins-server-vulnerabilities