EXPOSURES › CVE-2017-1000353
CVE-2017-1000353
HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev
Published2025-10-02
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2017-1000353 ↗
⚡ RCE
⌖ EXPLOITED IN THE WILD
SHAME 72/100
rceexploited-in-wild
Jenkins RCE flaw exploited in wild
Jenkins suffered a Remote Code Execution (RCE) vulnerability that was actively exploited, exposing users to unauthorized code execution.
Shame score — Active exploitation of a known RCE vulnerability in a widely-used CI/CD tool.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
PLAYERS IMPLICATED
DESCRIPTION
Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based protection mechanism.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.