IBM · Report #1492447
Public Jenkins instance with /script enabled
Validstatus
criticalseverity
16upvotes
11 Mar 2022disclosed
Summary
An RCE/LFI due to Public Jenkins instance with /script enabled was reported to IBM February 26th, analyzed and has been remediated since March 3rd, 2022. Thank you to Sanjok Karki (thesanjok) for the finding.
RCE/LFI due to Public Jenkins instance with /script enabled.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.