Vulnerability Details : CVE-2013-0331
Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to cause a denial of service via a crafted payload.
Vulnerability category: Input validationDenial of service
Products affected by CVE-2013-0331
- cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*
- cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*
Threat overview for CVE-2013-0331
Top countries where our scanners detected CVE-2013-0331
Top open port discovered on systems with this issue
8088
IPs affected by CVE-2013-0331 1,671
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2013-0331!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2013-0331
2.95%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 91 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-0331
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:N/I:N/A:P |
8.0
|
2.9
|
NIST |
CWE ids for CVE-2013-0331
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-0331
-
http://www.securityfocus.com/bid/57994
RETIRED: Jenkins Cross-Site Scripting, Security Bypass, and Denial of Service Vulnerabilities
-
http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb
Jenkins Security Advisory 2013-02-16 | CloudBeesVendor Advisory
-
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16
Jenkins Security Advisory 2013-02-16 - Security Advisories - Jenkins Wiki
-
http://rhn.redhat.com/errata/RHSA-2013-0638.html
RHSA-2013:0638 - Security Advisory - Red Hat Customer Portal
-
http://www.openwall.com/lists/oss-security/2013/02/21/7
oss-security - Re: Jenkins CVE request for Jenkins Security Advisory 2013-02-16
-
https://bugzilla.redhat.com/show_bug.cgi?id=914879
914879 – (CVE-2013-0331) CVE-2013-0331 jenkins: denial of service attack by feeding a carefully crafted payload to Jenkins
Jump to