← CVE Intelligence

CVE-2025-59476

Jenkins Project / Jenkins PUBLISHED

Description (CNA)

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be inserted from user-specified content in log messages, allowing attackers able to control log message contents to insert line break characters, followed by forged log messages that may mislead administrators reviewing log output.

Affected (CNA)

Vendor / productVersions
Jenkins Project / Jenkinsunaffected 2.516.3 before 2.516.*; unaffected 2.528 before *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.