Django · Report #579760
Jenkins Unauthenticated RCE on https://djangoci.com/
Informativestatus
criticalseverity
22upvotes
16 May 2019disclosed
Summary
This report discloses an RCE issue on djangoci.com as outlined in https://www.djangoproject.com/weblog/2019/may/15/rce-djangoci/
While technically a valid issue, it is out of scope for bounty, please see https://hackerone.com/django for details on which issues qualify for bounties.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.