Jenkins CI 远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/middleware/Jenkins-CI-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2017-1000353.md
• https://blog.csdn.net/m0_68045701/article/details/140234794
• https://www.cnblogs.com/jzssuanfa/p/19255187
• https://developer.aliyun.com/article/1226953
• https://zhuanlan.zhihu.com/p/116067599
• https://blog.csdn.net/YouthBelief/article/details/121528843
• https://misakikata.github.io/2020/03/Jenkins%E6%BC%8F%E6%B4%9E%E9%9B%86%E5%90%88%E5%A4%8D%E7%8E%B0/
• https://www.jenkins.io/security/advisory/2024-01-24/
• https://www.upwind.io/feed/jenkins-agents-remote-code-execution-vulnerability-cve-2024-43044
• https://krevetk0.medium.com/jenkins-rce-poc-or-simple-pre-auth-remote-code-execution-on-the-server-d18b868a77cb
• https://www.huntress.com/threat-library/vulnerabilities/cve-2024-23897
• https://www.jenkins.io/security/advisory/2026-03-18/
• https://github.com/gquere/pwn_jenkins
• https://thehackernews.com/2024/01/critical-jenkins-vulnerability-exposes.html
• https://www.exploit-db.com/exploits/46352

Related Vulnerabilities

• Jenkins 代码执行漏洞（CVE-2026-84645）
• PoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization
• Jenkins /view 文件读取漏洞（CVE-2026-53435）
• （CVE-2025-59474）Jenkins侧边栏权限绕过漏洞
• jenkins-unauthorized-rce: Jenkins unauthorized rce
• PoCCVE-2017-1000353: Jenkins CLI - Java Deserialization
• PoCCVE-2016-9299: Jenkins CLI - HTTP Java Deserialization
• PoCCVE-2018-1000600: Jenkins GitHub Plugin <=1.29.1 - Server-Side Request Forgery
• PoCCVE-2018-1000861: Jenkins - Remote Command Injection
• PoCCVE-2019-1003000: Jenkins Script Security Plugin <=1.49 - Sandbox Bypass
• PoCCVE-2019-10405: Jenkins <=2.196 - Cookie Exposure
• PoCCVE-2019-10475: Jenkins build-metrics 1.3 - Cross-Site Scripting
• PoCCVE-2020-2096: Jenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting