CVE-2013-0330

EPSS 0.30%

Jenkins allows Remote Users to Build Arbitrary Jobs

Published: 5/5/2022Modified: 3/13/2025

Description

Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to build arbitrary jobs via unknown attack vectors.

Affected packages (1)

Maven/org.jenkins-ci.main:jenkins-core>= 1.481, < 1.502

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 4.0	—	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

References (8)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2013-0330
PATCHhttps://github.com/jenkinsci/jenkins
WEBhttp://rhn.redhat.com/errata/RHSA-2013-0638.html
WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=914878
WEBhttps://web.archive.org/web/20200229023853/http://www.securityfocus.com/bid/57994
WEBhttps://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16
WEBhttp://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb
WEBhttp://www.openwall.com/lists/oss-security/2013/02/21/7