
Jenkins RCE Arbitrary File Read CVE-2024-23897
Jenkins RCE Arbitrary File Read CVE-2024-23897
Usage: python poc.py http://127.0.0.1:8888/ [/etc/passwd]
Update: Update to Jenkins 2.442, LTS 2.426.3
Fix: If you can't update to the latest version, disable access to the CLI, this should completely eliminate the possibility of exploitation.