CVE-2018-1000861 - Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
Project:Jenkins
Product:Jenkins Stapler Web Framework
Date Added:2022-02-10Due Date:2022-08-10
Vulnerability Name
Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
Description
A code execution vulnerability exists in the Stapler web framework used by Jenkins
Known To Be Used in Ransomware Campaigns?
Unknown
Action
Apply updates per vendor instructions.
Additional Notes
https://nvd.nist.gov/vuln/detail/CVE-2018-1000861