Jenkins 2.217-2.441 and LTS 2.222.1-2.426.2 - Cross-Site WebSocket Hijacking via CLI Endpoint
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-23898. PoCs published by davidmgaviria.
AI-analyzed exploit summary This repository contains a functional exploit PoC for CVE-2024-23898, targeting Jenkins via WebSocket manipulation to achieve remote code execution. The exploit uses crafted WebSocket frames to execute arbitrary commands on the target Jenkins server.
Description
Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking (CSWSH) vulnerability, allowing attackers to execute CLI commands on the Jenkins controller.
Exploits (1)
This repository contains a functional exploit PoC for CVE-2024-23898, targeting Jenkins via WebSocket manipulation to achieve remote code execution. The exploit uses crafted WebSocket frames to execute arbitrary commands on the target Jenkins server.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H