CVE-2023-27900

Published: 2023-03-10T21:15Z

Last Modified: 2025-02-28T19:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in hudson.util.MultipartFormDataParser, allowing attackers to trigger a denial of service. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt