Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2018-1999002 PoC — CloudBees Jenkins 安全漏洞

Source
https://github.com/0x6b7966/CVE-2018-1999002
Associated Vulnerability
Title:CloudBees Jenkins 安全漏洞 (CVE-2018-1999002)
Description:CloudBees Jenkins（前称Hudson Labs）是美国CloudBees公司的一套基于Java开发的持续集成工具，它主要用于监控持续的软件版本发布/测试项目和一些定时执行的任务。 CloudBees Jenkins 2.132及之前版本和2.121.1及之前版本中的Stapler Web框架的org/kohsuke/stapler/Stapler.java文件存在任意文件读取漏洞。攻击者可通过发送特制的HTTP请求利用该漏洞读取Jenkins master文件系统上的任何文件内容（限于Je
File Snapshot

 [4.0K]  /data/pocs/c3ff09d2d834c8a6afb5769f75b00b153a5a7dc7
└── [ 832]  POC

0 directories, 1 file
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.