cve/2017/CVE-2017-2608.md

CVE-2017-2608

Description

Jenkins before versions 2.44, 2.32.2 is vulnerable to a remote code execution vulnerability involving the deserialization of various types in javax.imageio in XStream-based APIs (SECURITY-383).

POC

Reference

No PoCs from references.

Github

• https://github.com/AdeliaNitzsche/Java-Deserialization-Cheat-Sheet
• https://github.com/BrittanyKuhn/javascript-tutorial
• https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet
• https://github.com/PalindromeLabs/Java-Deserialization-CVEs
• https://github.com/klausware/Java-Deserialization-Cheat-Sheet
• https://github.com/mishmashclone/GrrrDog-Java-Deserialization-Cheat-Sheet