Jenkins Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2014-3666 - Vulnerability Database

Jenkins Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2014-3666

High

Reference: CVE-2014-3666

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-3666

Title: Jenkins Improper Control of Generation of Code (Code Injection) Vulnerability

Overview:

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.