{"schemaVersion":3,"id":"RHSA-2024:0777","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: jenkins and jenkins-2-plugins security update","dates":{"published":"2024-10-02T11:39:23.000Z","modified":"2026-10-20T10:02:30.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":true,"selection":"version-preference"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"jenkins","name":"jenkins","label":"jenkins","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jenkins","purlType":"rpm","versions":[{"text":"< 0:2.426.3.1706516352-3.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.426.3.1706516352-3.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"jenkins-2-plugins","name":"jenkins-2-plugins","label":"jenkins-2-plugins","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jenkins-2-plugins","purlType":"rpm","versions":[{"text":"< 0:4.14.1706516441-1.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.14.1706516441-1.el8","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:0777","label":"access.redhat.com/errata/RHSA-2024:0777","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2023-003","label":"access.redhat.com/security/vulnerabilities/RHSB-2023-003","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066479","label":"bugzilla.redhat.com/show_bug.cgi?id=2066479","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126789","label":"bugzilla.redhat.com/show_bug.cgi?id=2126789","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135435","label":"bugzilla.redhat.com/show_bug.cgi?id=2135435","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164278","label":"bugzilla.redhat.com/show_bug.cgi?id=2164278","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170039","label":"bugzilla.redhat.com/show_bug.cgi?id=2170039","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170041","label":"bugzilla.redhat.com/show_bug.cgi?id=2170041","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215214","label":"bugzilla.redhat.com/show_bug.cgi?id=2215214","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215229","label":"bugzilla.redhat.com/show_bug.cgi?id=2215229","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222709","label":"bugzilla.redhat.com/show_bug.cgi?id=2222709","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222710","label":"bugzilla.redhat.com/show_bug.cgi?id=2222710","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232422","label":"bugzilla.redhat.com/show_bug.cgi?id=2232422","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232423","label":"bugzilla.redhat.com/show_bug.cgi?id=2232423","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232424","label":"bugzilla.redhat.com/show_bug.cgi?id=2232424","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232425","label":"bugzilla.redhat.com/show_bug.cgi?id=2232425","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232426","label":"bugzilla.redhat.com/show_bug.cgi?id=2232426","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242803","label":"bugzilla.redhat.com/show_bug.cgi?id=2242803","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243296","label":"bugzilla.redhat.com/show_bug.cgi?id=2243296","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://issues.redhat.com/browse/JKNS-271","label":"issues.redhat.com/browse/JKNS-271","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JKNS-289","label":"issues.redhat.com/browse/JKNS-289","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JKNS-337","label":"issues.redhat.com/browse/JKNS-337","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JKNS-344","label":"issues.redhat.com/browse/JKNS-344","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JKNS-345","label":"issues.redhat.com/browse/JKNS-345","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-11158","label":"issues.redhat.com/browse/OCPBUGS-11158","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-11253","label":"issues.redhat.com/browse/OCPBUGS-11253","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-11254","label":"issues.redhat.com/browse/OCPBUGS-11254","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-11446","label":"issues.redhat.com/browse/OCPBUGS-11446","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-1357","label":"issues.redhat.com/browse/OCPBUGS-1357","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-13869","label":"issues.redhat.com/browse/OCPBUGS-13869","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-14111","label":"issues.redhat.com/browse/OCPBUGS-14111","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-14609","label":"issues.redhat.com/browse/OCPBUGS-14609","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-15646","label":"issues.redhat.com/browse/OCPBUGS-15646","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-15902","label":"issues.redhat.com/browse/OCPBUGS-15902","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-1709","label":"issues.redhat.com/browse/OCPBUGS-1709","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-1942","label":"issues.redhat.com/browse/OCPBUGS-1942","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-2099","label":"issues.redhat.com/browse/OCPBUGS-2099","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-2184","label":"issues.redhat.com/browse/OCPBUGS-2184","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-2318","label":"issues.redhat.com/browse/OCPBUGS-2318","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-23438","label":"issues.redhat.com/browse/OCPBUGS-23438","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-27388","label":"issues.redhat.com/browse/OCPBUGS-27388","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-655","label":"issues.redhat.com/browse/OCPBUGS-655","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-6579","label":"issues.redhat.com/browse/OCPBUGS-6579","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-6870","label":"issues.redhat.com/browse/OCPBUGS-6870","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-710","label":"issues.redhat.com/browse/OCPBUGS-710","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-8377","label":"issues.redhat.com/browse/OCPBUGS-8377","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-8442","label":"issues.redhat.com/browse/OCPBUGS-8442","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/OCPTOOLS-244","label":"issues.redhat.com/browse/OCPTOOLS-244","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0777.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0777.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25857","label":"access.redhat.com/security/cve/CVE-2022-25857","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25857","label":"www.cve.org/CVERecord?id=CVE-2022-25857","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25857","label":"nvd.nist.gov/vuln/detail/CVE-2022-25857","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://bitbucket.org/snakeyaml/snakeyaml/issues/525","label":"bitbucket.org/snakeyaml/snakeyaml/issues/525","hostname":"bitbucket.org","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29599","label":"access.redhat.com/security/cve/CVE-2022-29599","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29599","label":"www.cve.org/CVERecord?id=CVE-2022-29599","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29599","label":"nvd.nist.gov/vuln/detail/CVE-2022-29599","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42889","label":"access.redhat.com/security/cve/CVE-2022-42889","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42889","label":"www.cve.org/CVERecord?id=CVE-2022-42889","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42889","label":"nvd.nist.gov/vuln/detail/CVE-2022-42889","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://blogs.apache.org/security/entry/cve-2022-42889","label":"blogs.apache.org/security/entry/cve-2022-42889","hostname":"blogs.apache.org","tags":["ARTICLE"]},{"url":"https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om","label":"lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om","hostname":"lists.apache.org","tags":["ARTICLE"]},{"url":"https://seclists.org/oss-sec/2022/q4/22","label":"seclists.org/oss-sec/2022/q4/22","hostname":"seclists.org","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-2976","label":"access.redhat.com/security/cve/CVE-2023-2976","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-2976","label":"www.cve.org/CVERecord?id=CVE-2023-2976","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2976","label":"nvd.nist.gov/vuln/detail/CVE-2023-2976","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24422","label":"access.redhat.com/security/cve/CVE-2023-24422","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24422","label":"www.cve.org/CVERecord?id=CVE-2023-24422","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24422","label":"nvd.nist.gov/vuln/detail/CVE-2023-24422","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3016","label":"www.jenkins.io/security/advisory/2023-01-24/","hostname":"www.jenkins.io","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25761","label":"access.redhat.com/security/cve/CVE-2023-25761","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25761","label":"www.cve.org/CVERecord?id=CVE-2023-25761","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25761","label":"nvd.nist.gov/vuln/detail/CVE-2023-25761","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3032","label":"www.jenkins.io/security/advisory/2023-02-15/","hostname":"www.jenkins.io","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25762","label":"access.redhat.com/security/cve/CVE-2023-25762","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25762","label":"www.cve.org/CVERecord?id=CVE-2023-25762","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25762","label":"nvd.nist.gov/vuln/detail/CVE-2023-25762","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3019","label":"www.jenkins.io/security/advisory/2023-02-15/","hostname":"www.jenkins.io","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-35116","label":"access.redhat.com/security/cve/CVE-2023-35116","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-35116","label":"www.cve.org/CVERecord?id=CVE-2023-35116","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35116","label":"nvd.nist.gov/vuln/detail/CVE-2023-35116","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-37946","label":"access.redhat.com/security/cve/CVE-2023-37946","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-37946","label":"www.cve.org/CVERecord?id=CVE-2023-37946","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37946","label":"nvd.nist.gov/vuln/detail/CVE-2023-37946","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-2998","label":"www.jenkins.io/security/advisory/2023-07-12/","hostname":"www.jenkins.io","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-37947","label":"access.redhat.com/security/cve/CVE-2023-37947","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-37947","label":"www.cve.org/CVERecord?id=CVE-2023-37947","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37947","label":"nvd.nist.gov/vuln/detail/CVE-2023-37947","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-2999","label":"www.jenkins.io/security/advisory/2023-07-12/","hostname":"www.jenkins.io","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39325","label":"access.redhat.com/security/cve/CVE-2023-39325","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39325","label":"www.cve.org/CVERecord?id=CVE-2023-39325","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39325","label":"nvd.nist.gov/vuln/detail/CVE-2023-39325","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44487","label":"access.redhat.com/security/cve/CVE-2023-44487","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://go.dev/issue/63417","label":"go.dev/issue/63417","hostname":"go.dev","tags":["ARTICLE"]},{"url":"https://pkg.go.dev/vuln/GO-2023-2102","label":"pkg.go.dev/vuln/GO-2023-2102","hostname":"pkg.go.dev","tags":["Advisory"]},{"url":"https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","label":"www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","hostname":"www.cisa.gov","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40336","label":"access.redhat.com/security/cve/CVE-2023-40336","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40336","label":"www.cve.org/CVERecord?id=CVE-2023-40336","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40336","label":"nvd.nist.gov/vuln/detail/CVE-2023-40336","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3106","label":"www.jenkins.io/security/advisory/2023-08-16/","hostname":"www.jenkins.io","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40337","label":"access.redhat.com/security/cve/CVE-2023-40337","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40337","label":"www.cve.org/CVERecord?id=CVE-2023-40337","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40337","label":"nvd.nist.gov/vuln/detail/CVE-2023-40337","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3105","label":"www.jenkins.io/security/advisory/2023-08-16/","hostname":"www.jenkins.io","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40338","label":"access.redhat.com/security/cve/CVE-2023-40338","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40338","label":"www.cve.org/CVERecord?id=CVE-2023-40338","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40338","label":"nvd.nist.gov/vuln/detail/CVE-2023-40338","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3109","label":"www.jenkins.io/security/advisory/2023-08-16/","hostname":"www.jenkins.io","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40339","label":"access.redhat.com/security/cve/CVE-2023-40339","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40339","label":"www.cve.org/CVERecord?id=CVE-2023-40339","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40339","label":"nvd.nist.gov/vuln/detail/CVE-2023-40339","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090","label":"www.jenkins.io/security/advisory/2023-08-16/","hostname":"www.jenkins.io","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40341","label":"access.redhat.com/security/cve/CVE-2023-40341","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40341","label":"www.cve.org/CVERecord?id=CVE-2023-40341","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40341","label":"nvd.nist.gov/vuln/detail/CVE-2023-40341","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3116","label":"www.jenkins.io/security/advisory/2023-08-16/","hostname":"www.jenkins.io","tags":["ARTICLE"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44487","label":"www.cve.org/CVERecord?id=CVE-2023-44487","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487","label":"nvd.nist.gov/vuln/detail/CVE-2023-44487","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/dotnet/announcements/issues/277","label":"github.com/dotnet/announcements/issues/277","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/","label":"www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/","hostname":"www.nginx.com","tags":["ARTICLE"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog","hostname":"www.cisa.gov","tags":["ARTICLE"]}],"lineage":{"upstream":["CVE-2022-25857","CVE-2022-29599","CVE-2022-42889","CVE-2023-24422","CVE-2023-25761","CVE-2023-25762","CVE-2023-2976","CVE-2023-35116","CVE-2023-37946","CVE-2023-37947","CVE-2023-39325","CVE-2023-40336","CVE-2023-40337","CVE-2023-40338","CVE-2023-40339","CVE-2023-40341","CVE-2023-44487"],"downstream":[],"duplicates":[],"related":["CVE-2023-39325"]},"timeline":[{"kind":"published","date":"2024-10-02T11:39:23.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-20T10:02:30.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T18:47:03.570Z","stale":false,"partial":false}}