CVE-2023-43494 PoC — Jenkins 安全漏洞

Source

https://github.com/mqxmm/CVE-2023-43494

Associated Vulnerability

Title: Jenkins 安全漏洞 (CVE-2023-43494)
Description:Jenkins 2.50 through 2.423 (both inclusive), LTS 2.60.1 through 2.414.1 (both inclusive) does not exclude sensitive build variables (e.g., password parameter values) from the search in the build history widget, allowing attackers with Item/Read permission to obtain values of sensitive variables used in builds by iteratively testing different characters until the correct sequence is discovered.

Description

Jenkins 2.50 through 2.423 (both inclusive), LTS 2.60.1 through 2.414.1 (both inclusive) File Read

Readme

# CVE-2023-43494
Jenkins 2.50 through 2.423 (both inclusive), LTS 2.60.1 through 2.414.1 (both inclusive) File Read

References:
https://www.jenkins.io/security/advisory/2023-09-20/#SECURITY-3261

http://www.openwall.com/lists/oss-security/2023/09/20/5

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →