Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2015-8103

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wfw7-6632-xcv2

Jenkins CLI Deserialization of Untrusted Data vulnerability The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic `webapps/ROOT/WEB-INF/lib/commons-collections-*.jar` file and the "Groovy variant in `ysoserial`".

gitlab/maven/org.jenkins-ci.main/cli/CVE-2015-8103

Deserialization of Untrusted Data The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-*.jar file and the "Groovy variant in 'ysoserial'".