CVE-2017-1000353 Jenkins Jenkins
Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based protection mechanism.
- CVSS
- not scored
On CISA’s exploited list
Jenkins Remote Code Execution Vulnerability
- Added
- 2025-10-02
- Federal patch deadline
- 2025-10-23
- Ransomware use
- not known