Jenkins allows Remote Users to Build Arbitrary Jobs

GHSA-25c5-58xw-hw5q · CVE-2013-0330

Published May 5, 2022 · Modified Mar 13, 2025

Description

Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to build arbitrary jobs via unknown attack vectors.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2013-0330
WEB https://bugzilla.redhat.com/show_bug.cgi?id=914878
PACKAGE https://github.com/jenkinsci/jenkins
WEB https://web.archive.org/web/20200229023853/http://www.securityfocus.com/bid/57994
WEB https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16
WEB http://rhn.redhat.com/errata/RHSA-2013-0638.html
WEB http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb
WEB http://www.openwall.com/lists/oss-security/2013/02/21/7

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes