vulnerability
Jenkins Advisory 2018-02-14: CVE-2018-1000067: Server-Side Request Forgery
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:P/I:N/A:N) | Feb 15, 2018 | May 1, 2018 | Mar 27, 2026 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Feb 15, 2018
Added
May 1, 2018
Modified
Mar 27, 2026
Description
An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submit HTTP GET requests and get limited information about the response.
Solutions
jenkins-lts-upgrade-2_89_4jenkins-upgrade-2_107
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.