First published: Sat Feb 23 2013(Updated: )
Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to cause a denial of service via a crafted payload.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Jenkins Jenkins | <=1.480.2 | |
Jenkins Jenkins | <=1.501 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-0331 has been rated as a medium severity vulnerability.
To fix CVE-2013-0331, upgrade Jenkins to version 1.502 or later.
CVE-2013-0331 affects Jenkins versions prior to 1.502 and LTS versions prior to 1.480.3.
CVE-2013-0331 enables a denial of service attack by allowing crafted payloads to be used against Jenkins.
Yes, CVE-2013-0331 can be exploited by remote authenticated users with write access.