Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2015-8103 PoC — CloudBees Jenkins CI 远程代码执行漏洞

Source
https://github.com/Threekiii/Awesome-POC/blob/master/%E4%B8%AD%E9%97%B4%E4%BB%B6%E6%BC%8F%E6%B4%9E/Jenkins%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2015-8103.md
Associated Vulnerability
Title:CloudBees Jenkins CI 远程代码执行漏洞 (CVE-2015-8103)
Description:CloudBees Jenkins是美国CloudBees公司的一款基于Java开发的开源的、可持续集成的自动化服务器，它主要用于监控持续的软件版本发布/测试项目和一些定时执行的任务。LTS（Long-Term Support）是CloudBees Jenkins的一个长期支持版本。 CloudBees Jenkins CI 1.638之前版本和LTS 1.625.2之前版本的Jenkins CLI子系统中存在安全漏洞。远程攻击者可借助特制的序列化Java对象利用该漏洞执行任意代码。
File Snapshot

 ## Jenkins远程代码执行漏洞 CVE-2015-8103

## 漏洞描述

1.638之前的Jenkins和1.625.2之前的LTS中的`Jenkins CLI`子系统，允许远程攻击者通过

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.