maalfer/cve-2024-23897Poc para explotar la vulnerabilidad CVE-2024-23897 en versiones 2.441 y anteriores de Jenkins, mediante la cual podremos leer archivos internos del sistema sin estar autenticados
PoC to exploit the CVE-2024-23897 vulnerability in Jenkins versions 2.441 or earlier, through which we can read internal system files.
First, we check the Jenkins version to ensure it is vulnerable:
Next, we can use the exploit:
python3 CVE-2024-23897.py 172.17.0.2 8080 /etc/passwd
To practice exploiting the vulnerability, we used the 'SecretJenkins' lab from the https://dockerlabs.es platform:
