Description
Jenkins CLI中存在任意文件读取漏洞，此漏洞是由于应用程序未充分验证用户输入的数据所导致的。
Jenkins CLI CVE-2024-23897 任意文件读取漏洞 2
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/vulhub/vulhub/blob/master/jenkins/CVE-2024-23897/README.zh-cn.md
https://www.cnblogs.com/BMCel/p/18027664
https://zhuanlan.zhihu.com/p/1930960616950063318
https://isecurity.huawei.com/sec/web/viewAlert.do?id=2483
https://www.leavesongs.com/PENETRATION/jenkins-cve-2024-23897.html
https://avd.aliyun.com/detail?id=AVD-2024-23897
https://yunch.com.cn/?wenti/93.html
https://zone.huoxian.cn/d/2885-jenkinscve-2024-23897
https://www.secrss.com/articles/63235
https://www.huaweicloud.com/notice/2022/20240126170948005.html
https://www.jenkins.io/security/advisory/2024-01-24/
https://nvd.nist.gov/vuln/detail/CVE-2024-23897
https://www.exploit-db.com/exploits/51993
https://research.splunk.com/web/c641260d-2b48-4eb1-b1e8-2cc5b8b99ab1/
https://www.trendmicro.com/en_us/research/24/c/cve-2024-23897.html
https://www.sentinelone.com/vulnerability-database/cve-2024-23897/
https://www.reddit.com/r/immersivelabs/comments/1apyh2s/cve202423897_jenkins_arbitrary_file_read_offensive/