CVE-2016-0789
MEDIUMJenkins <1.650-1.642.2 - CRLF Injection
Title source: llmDescription
CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Scores
CVSS v3
6.1
EPSS
0.0015
EPSS Percentile
35.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Classification
CWE
CWE-20
Status
draft
Affected Products (4)
jenkins/jenkins
< 1.642.1
redhat/openshift
jenkins/jenkins
< 1.649
org.jenkins-ci.main/jenkins-core
< 1.650Maven
Timeline
Published
Apr 07, 2016
Tracked Since
Feb 18, 2026