CVE-2013-0331

EPSS 0.4%
Published 19.03.2013 14:55:02
Last modified 11.04.2025 00:51:21
Source secalert@redhat.com
Teams watchlist Login
Open Login

Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to cause a denial of service via a crafted payload.

Affected products Warnungen 0 Metrics 2 CWE 1 References 9

Data is provided by the National Vulnerability Database (NVD)

Jenkins ≫ Jenkins SwEditionlts Version <= 1.480.2

Jenkins ≫ Jenkins Version <= 1.501

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.4%	0.575

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://rhn.redhat.com/errata/RHSA-2013-0638.html

http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb

Vendor Advisory

http://www.openwall.com/lists/oss-security/2013/02/21/7

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16

http://www.securityfocus.com/bid/57994

https://bugzilla.redhat.com/show_bug.cgi?id=914879

https://nvd.nist.gov/vuln/detail/CVE-2013-0331

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-0331

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-0331

EUVD