Description (CNA)
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows attackers with permission to create or configure various objects to inject crafted content into Old Data Monitor that results in the instantiation of potentially unsafe objects once discarded by an administrator.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Jenkins project / Jenkins | affected unspecified through 2.274; affected unspecified through LTS 2.263.1 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.