Jan 24, 2024
1 new incident, 1 with updates.
Started
- ClosedPatched
Jenkins CLI arbitrary file read (CVE-2024-23897) leads to RCE
Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution. Added to the CISA KEV catalog on 2024-08-19. CISA lists known use in ransomware campaigns.
Jenkins Command Line Interface (CLI)Closed Aug 19, 2024
Updated
- ClosedPatched
Atlassian Confluence Data Center and Server Template Injection
Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code execution. Added to the CISA KEV catalog on 2024-01-24. CISA lists known use in ransomware campaigns. CVE-2023-22527 was assigned before 2024; the KEV listing came in 2024.
Atlassian Confluence Data Center and ServerClosed Jan 24, 2024
